ArcSight intagration - RT xml import to generate tickets

[Scot Fackler]

Has anyone had success integrating ArcSight with RT/RTIR. I would like to use the ArcSight case export to create RTIR tickets for Incident Response activities. Is there a better method than using an xml parser to parse the ArcSight case export xml file in order to generate a ticket via the RTIR REST API? Hate to reinvent the wheel here.

Scot Fackler
Technical Advisor
FedEx Information Security
              __|__
'---o--o--(_)--o--o---'
                 " " "