SIEM integration API

To access that sort of data, we have another API documented here: https://developer.sophos.com/

Hi. Thank you for your answer.

I perfectly know how Sophos API works, but SIEM Integration API does not collect XDR data.

I would like to ask a feature enhancement to let this integration collect XDR data as well.

regards

Hi. Thank you for your answer.

I perfectly know how Sophos API works, but SIEM Integration API does not collect XDR data.

I would like to ask a feature enhancement to let this integration collect XDR data as well.

regards

Currently, it’s not possible to replicate all the data stored in the Data Lake onto a SIEM or local environment, it's only possible to query the data. I suggest reaching out to your account manager to inquire if there’s anything present on the product roadmap that may fulfil your needs.