Sophos Central - Retrieving Alerts via API

Hi,

We're trying to retrieve all Sophos Central alerts going back 12 months using the Sophos API but we're only able to see alerts from the previous 24 hours. Are we able to do this?

Thanks in advance

Top Replies

RichardP over 3 years ago in reply to Kyle Parrish +2 verified

Yes, Central's data retention is 90 days for GDPR.

Parents

+1 Kyle Parrish over 3 years ago

Hi!

Unfortunately, it looks like Sophos Central only stored event data for the past 90 days. That will be as far back as you can go.

GitHub - sophos-cybersecurity/sophos-central-api-connector: Gather alerts and endpoint data from your Sophos Central tenants
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
+1 RichardP over 3 years ago in reply to Kyle Parrish

Yes, Central's data retention is 90 days for GDPR.

RichardP

Program Manager, Support Readiness | CISSP | Sophos Technical Support
Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +2 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Reply

+1 RichardP over 3 years ago in reply to Kyle Parrish

Yes, Central's data retention is 90 days for GDPR.

RichardP

Program Manager, Support Readiness | CISSP | Sophos Technical Support
Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +2 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Children

No Data