Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.
I've put an issue, that may be by design (an awful design), whereby if you pull values via the API, they are all transposed with each two digit pairFor example, if I pull an event and it shows me an endpoint_id of: endpoint_id":"baee7c85-6cd5-4b85-ae84-cf90cf701757" If I then want to query that endpoint or browse to it in the browser, I use this: https://central.sophos.com/manage/devices/computers/abeec758-c65d-b458-ea48-fc09fc077175/summary You can see that the value's are different, each two-digit 'pair' are transposed in some weird way:API says baee7c85-6cd5-4b85-ae84-cf90cf701757URL says abeec758-c65d-b458-ea48-fc09fc077175
Why is this the case? Makes scripting stuff that has interactive links to the GUI all that much more challenging, for essentially no reason that I can see.
This isn't just for endpoints, it's the same for alerts and probably more.
Thanks for reaching out to the Sophos Community Forum.
The discrepancy appears to be related to a change that occurred in the Sophos Central back-end. The format in which values are stored was changed from Ruby to Java.
Using a conversion tool along with the ID's returned via the API allowed me to confirm this. I'll reach out to our team internally to inquire if there are any plans to make changes to Sophos Central API to fix the discrepancy.
Thanks for bringing this to our attention.