Cisco Firepower external DBs supported

[AlexPi]

I am relatively new in using Firepower IPS and clearly using the internal/local database for all the logs makes the whole system too slow to search for events and obviously the window of backlog is too small. I would like to push all these logs to an external DB.

What are the supported SQL versions for Firepower Management 6.2.1?

Also it is my understanding that going with MSSQL is out of the window, which is bad since we have extensive MSSQL clustered environments.

Any advice would be greatly appreciated!

[mikael.lahtela]

Hi,

I would want to suggest you to look at eStreamer to send events to an external event logging.
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/api/eStreamer/EventStreamerIntegrationGuide/Intro.html

br, Micke

[AlexPi]

Thanks for the suggestion! That looks pretty cool. 

I guess I could keep a much longer backlog there, since ideally we want to be able to search up to 6 months back.