RTIR and ArcSight Integration

[Scot Fackler]

I have looked high and low through the current RTIR documentation to no avail for information on the built-in ArcSight integrations noted on the RTIR Features page. What I would like to do is use the ArcSight case export to create RTIR tickets for Incident Response activities. Is there a better method than using an xml parser to parse the ArcSight case export xml file in order to generate a ticket via the RTIR REST API?
Scot Fackler
Technical Advisor
FedEx Information Security
              __|__
 '---o--o--(_)--o--o---'
                " " "

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rtir/attachments/20140903/c0d84fe0/attachment.html>