Data sources

Introduction to data sources¶

Data sources can be any existing security tool, threat feed, ticketing system or database. The Brinqa connector framework formalizes the common ways of interconnection between these systems via APIs, database extracts and structured formats like CSV, JSON, and XML. Connecting your tools to Brinqa products allows you to automate, simplify and streamline the process of extracting data for analysis, while simultaneously accomplishing critical tasks such as transformation, normalization and contextualization.

Administration > Data Integration > Data Sources will take you to the Manage Data Sources page, which displays a list view of all configured data sources at the top and available connectors for new sources at the bottom.

Table 1: List view contents

Create a new data source¶

Procedure

1. Navigate to Administration > Data Integration > Data Sources
2. Click the icon that corresponds with the desired data source
3. Fill in the properties below and click Test Connection. If the connection fails, check the access credentials. If the connector requires user credentials, that user must have at least read access to the data source.
4. Click Create

Table 2: New data source properties

Editing or deleting a data source¶

Existing data sources can be edited or deleted by clicking the Actions button that appears to the right on mouseover of the entry on the list view.

Manually syncing a data source¶

You can manually sync data from a data source by clicking the sync icon that appears next to the Last Synced date when moused over. A modal window will open and allow you to select the time period for which you want data, as well as filtering options for that data. Filtering options are specific to the data source's connector.

TUTORIAL: Qualys Vulnerability Data Source¶

This tutorial will walk through the steps of setting up a Qualys Vulnerability Management data source. Once the data source is set up, it should be mapped so that data can be synced into your Brinqa application. A Qualys mapping tutorial can be found in the Data Mapping article.

1. Navigate to Administration > Data Integration > Data Sources
2. Click the Qualys Vulnerability Management button
3. Enter the details in Table 3 below.
4. Click Test Connection. A pop-up will appear if the connection was successful.
5. Click Create
6. Proceed to the Data Mappings module to map the newly created data source to a data model.

Table 3. Data source settings

TUTORIAL: Rapid7 Nexpose Vulnerability Data Source¶

This tutorial will walk through the steps of setting up a Rapid7 Nexpose data source. Once the data source is set up, it should be mapped so that data can be synced into your Brinqa application. A Rapid7 Nexpose mapping tutorial can be found in the Data Mapping article.

1. Navigate to Administration > Data Integration > Data Sources
2. Click the Rapid7 Nexpose button. Note: select the non-XML Nexpose option.
3. Enter the details in Table 4 below.
4. Click Test Connection. A pop-up will appear if the connection was successful.
5. Click Create
6. Proceed to the Data Mappings module to map the newly created data source to a data model.

Table 4. Data source settings