IBM Support

QRadar: Exported reference set data in CSV format results in “Error 0x80070057: The parameter is incorrect” from Microsoft Excel

Troubleshooting


Problem

Users who export reference sets as CSV file, then attempt to open it in Microsoft Excel might see the error: 'Error 0x80070057: The parameter is incorrect' is displayed, which can be caused by a colon character (:) in the name of the reference set. Error 0x80070057 is not QRadar specific, but a Microsoft Excel error message due to how special characters are handled. Reopening the file after skipping the error message in Windows typically resolves this problem.

Cause

Excel has an issue opening a file when the file contains a colon (:) in the name.

Resolving The Problem

Administrators who experience this issue can Skip the error message generated by Microsoft Excel, then open their CSV file export. To recreate this error message or work around this Microsoft Excel error message, see the following procedure:
  1. Log in to the QRadar UI
  2. Click the Admin page.
  3. Click Reference Set Management.
  4. Highlight a Reference set with a colon (:) in its name.
  5. Click View Contents.
  6. Click Export.
  7. Navigate to where the zip file downloaded in Windows explorer
  8. Right-click the zip file.
  9. Click Extract All > Extract
  10. The error message Error 0x80070057: The parameter is incorrect is displayed.

    image-20190605143139-1
  11. Select Skip to bypass the error message.
  12. Double-click on the CSV file to open the reference data export.
     
Results
After skipping the error message, the CSV file will open properly in Microsoft Excel.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"WinCollect","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
14 August 2020

UID

ibm10885338