Rtir & ms sql

Hello,

I would like to use RTIR product with MS SQL database but I don’t information about how to install MS SQL for the RTIR.

Is it possible to use MS SQL as database for RTIR? If not, is there any connector that can be used in order to integrate MS SQL?

Can RTIR be integrated with SIEM tools?

I look forward for your reply.

Kind regards,

Mohamatti

Hello,

I would like to use RTIR product with MS SQL database but I don’t information about how to install MS SQL for the RTIR.

Is it possible to use MS SQL as database for RTIR? If not, is there any connector that can be used in order to integrate MS SQL?

We don’t currently support MS SQL (And don’t generally recommend running RT or RTIR on Windows.)

There are certainly Perl DBI drivers for MS SQL, so you can build custom integrations
with MS SQL databases.

Can RTIR be integrated with SIEM tools?

Definitely, either through the Perl API or the REST API. Are there specific tools you’re looking to integrate?

Best,
Jesse

Hi Jesse,

Many thanks for your reply.

I would like to integrate RTIR with ArcSight. Any documentation available about the integration?

Kind regards,
Mohamed Maricar

Hi Jesse,

Many thanks for your reply.

I would like to integrate RTIR with ArcSight. Any documentation available about the integration?

We have an ArcSight integration that was designed for an earlier version
of RTIR. For a variety of reasons, it wasn’t released publicly, though
I’m wokring on getting that changed. It’d need some work to make it
compatible with the current release, though. At the very least, it’d be a decent
starting point. (I should note that Best Practical would be happy to build
integrations for you or to provide you with commercial-grade support as you
do so yourself.)

Best,
Jesse

Hello,

We would like to use MS SQL database as a backend for our RTIR system.

I understand that RTIR only supports MySQL, PostgreSQL and Oracle.

Can anyone advise me how to set up MS SQL as the backend for the RTIR system?

Any documentation available for this?

I look forward for your advise.

Kind regards,
Mohamed Maricar