Sophos Intercept X for Server - Monitoring of Logs via SNMP or Windows Event Viewer

Question

Hi folks 
 We have a bunch of Servers with "Sophos Intercept X for Server"-License. We now want to integrate the logs of the Endpoint Agent into our Monitoring System (CheckMK). 
 Is it possible to configure that the logs can be fetched/send via SNMP or write them into the Windows Event Viewer?

Qoosh · Accepted Answer

Hi Bernhard , 
 Thanks for reaching out to the Sophos Community Forum. 
 While it isn't possible to re-route/write local Sophos Endpoint/Server Logs via SNMP, it is possible to integrate event and alert data from Sophos Central into your SIEM solution. - Sophos Central APIs: Send alert and event data to your SIEM 
 If this isn't quite what you were looking for, just let me know, and I can assist you in submitting a feature request for this to be added.

Sophos Intercept X for Server - Monitoring of Logs via SNMP or Windows Event Viewer

Top Replies