What is the retention period for the log files for the endpoints in Sophos Central?
Sophos Central stores endpoint events/alerts for 90 days and Central audit logs for 365 days.
You can export the events to CSV/PDF.Regards,
Jak