Missing Logs from the API endpoint


We continuously query Sophos Central API endpoints for alerts, events on a 5 minute basis.

We've noticed that there are missing logs every day.

The next cursor that is returned in every response is used in the next request to query for new data.

But at the end of the day, when i query for events for the entire day using start date instead of next cursor, all of the logs seem to be there.

So, it seems a case of events sneaking in after the response is returned by the API somehow.

Could someone please let us know if anything is missing in the way we query for data ?

Thank you


Parents Reply Children