[rtir] [Rtir] RTIR & MS SQL

[Jesse Vincent]

On Wed, Mar 18, 2015 at 07:16:40AM +0000, M.A Maricar wrote:
> Hi Jesse,
> 
> Many thanks for your reply.
> 
> I would like to integrate RTIR with ArcSight. Any documentation available about the integration?

We have an ArcSight integration that was designed for an earlier version
of RTIR. For a variety of reasons, it wasn't released publicly, though
I'm wokring on getting that changed. It'd need some work to make it
compatible with the current release, though. At the very least, it'd be a decent
starting point. (I should note that Best Practical would be happy to build
integrations for you or to provide you with commercial-grade support as you 
do so yourself.)

Best,
Jesse

> 
> Kind regards,
> Mohamed Maricar
> 
> > Date: Wed, 18 Mar 2015 02:24:32 -0400
> > From: jesse at bestpractical.com
> > To: maricarov at hotmail.com
> > CC: rtir at lists.bestpractical.com
> > Subject: Re: [Rtir] RTIR & MS SQL
> > 
> > 
> > 
> > 
> > On Tue, Mar 17, 2015 at 02:10:28PM +0000, M.A Maricar wrote:
> > > Hello,
> > >  
> > > I would like to use RTIR  product with MS SQL database but I don't information about how to install MS SQL for the RTIR.
> > >  
> > > Is it possible to use MS SQL as database for RTIR? If not, is there any connector that can be used in order to integrate MS SQL?
> > 
> > We don't currently support MS SQL (And don't generally recommend running RT or RTIR on Windows.) 
> > 
> > There are certainly Perl DBI drivers for MS SQL, so you can build custom integrations
> > with MS SQL databases.
> >   
> > > Can RTIR be integrated with SIEM tools?
> > 
> > Definitely, either through the Perl API or the REST API. Are there specific tools you're looking to integrate?
> > 
> > Best,
> > Jesse
>  		 	   		  

--