Advisory: Sophos Endpoint - "Your connection isn't private." We're aware of a certificate issue and are actively working to resolve it. Please see: KB-000045954 for the latest updates.

What API can be used to get the recent events for a device?

I am trying to grab the recent events for specific devices with the API.  When looking at a device in Central it would be the item on the summary page listed under recent events or under the events tab.  

I seem to be missing the API that will let me pull the events by an endpointId.

What would be the correct API to us?