Automated options for pulling event data with Sophos Central

Am I understanding this correctly? This is available for CUSTOMERS only?  Not for Partners? I can't get an aggregate view on all my managed customers?

Hi Leon,

to piggy back of this old question, is there a way to use the API to pull down the "Active user" report?

I can see no way to do this from the documents.

Many thanks,

Patricks

Hi Patrick O'Dwyer 

We do have the options available to Schedule the reports as suggested in this article where you can select the option "Send an email with a report attached (not secure)". 

Hi Shweta,

Thanks for looking at this. Unfortunately what I was after was a method of getting the file in an automated way, so it could be ingested by another system for Licence reporting purposes.

I think email would not be suitable for this need.

Many thanks

Patrick

Hi Patrick O'Dwyer 

This can be achieved by SIEM integration as mentioned above in this thread. I would suggest you contact your partner in case you require further assistance with SIEM integration.