Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 15 subscribers
  • Views 13483 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Central API to get Status

Chris Harland

Are there any API calls I can make that would retrieve asset status.  I'd like to automate a pull of assets and asset metadata, including protection status, last logged in user and last central activity of those assets to compare with other asset registers.  The API seems more event focussed, which is transient data, I am more interested in state data, some of which is influenced by event data.

This would help with licensing and gap analysis. 



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to Haridoss Sreenivasan

    Thanks for your reply but I don't see the answers I was looking for.  

     

    The API documentation is all around SIEM integration, which is basically an event feed.  I am not currently looking for an event feed, I'm looking for data such as how many devices we have which are in an unprotected state, (known by sophos and not known by sophos which would come from correlation with feeds from another product), so what I need is an asset register export from Sophos, which can be done via the interface.

    I'm also interested in pulling other reports via the API from the reporting system, which we could of course do by collecting all the SIEM data and generating reports based on that, but its a much larger job than if we could just get reporting data direct from the API.

Children
Unfiltered HTML