Hi folks
We have a bunch of Servers with "Sophos Intercept X for Server"-License. We now want to integrate the logs of the Endpoint Agent into our Monitoring System (CheckMK).
Is it possible to configure that the logs can be fetched/send via SNMP or write them into the Windows Event Viewer?
Hi Bernhard,
Thanks for reaching out to the Sophos Community Forum.
While it isn't possible to re-route/write local Sophos Endpoint/Server Logs via SNMP, it is possible to integrate event and alert data from Sophos Central into your SIEM solution.
- Sophos Central APIs: Send alert and event data to your SIEM
If this isn't quite what you were looking for, just let me know, and I can assist you in submitting a feature request for this to be added.
