Sophos API Causes Local Alerts to Stop Appearing

Hi Anish, 

Thanks for posting your question. No, this should not happen. The alerts and events in the Sophos Central Dashboard will continue to appear there regardless of whether you have created an API key or are using the SIEM API script. Would you be able to give me more details or an example? As I believe there will be a different explanation for this behaviour. 

Thanks

Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

Hi Anish, 

Thanks for posting your question. No, this should not happen. The alerts and events in the Sophos Central Dashboard will continue to appear there regardless of whether you have created an API key or are using the SIEM API script. Would you be able to give me more details or an example? As I believe there will be a different explanation for this behaviour. 

Thanks

Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

Hi,

As I dont have access to the Sophos platform I'm waiting for the customer to confirm some tests.  As soon as I get this I'll update this post. 

Thanks, Anish