Sophos Central API Client Credential Validity Management

Does Sophos provide any validity management for its API credentials, after its 36 months expiry? 

If possible, how can we handle this situation with a SIEM application?