Hi all,
I was wondering if there's a way to retrieve the date of "Last Agent Update" of Sophos Agent on Computer/Servers via API
We are able to get this info massively from Computers and Servers Report, but I wanted to automate this check without relying on a periodic CSV export.
Do you have any suggestion on how can I proceed?
Thanks
At the moment it seems that the only info easily retrievable is the "Last Seen Date"
Hi Salvatore,
It looks like this is not currently possible. If you would like to see this implemented in future updates to the API, I'd suggest sending in a feature request. You can do so by opening a support case with our team.
What may be possible is to use APIs to interact with Sophos' Live Discover/Response to structure a query which looks in the registry for the latest update time. The following registry location contains some information on updating.
- HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\AutoUpdate\UpdateStatus
One caveat is that this will require the device to be online.
