Using Sophos Central Groups

Hi Stuart,

Thanks for reaching out to the Sophos Community Forum.

If you would like to automatically move devices to groups based on the device's health, this may be possible by using Sophos Central API's. The /endpoint-groups post function allows you to move devices into groups, and the /endpoints get function will allow you to query the status of devices. 

Could you elaborate on what you're looking to do with this? Would Heartbeat be an alternative?

Hi Stuart,

Thanks for reaching out to the Sophos Community Forum.

If you would like to automatically move devices to groups based on the device's health, this may be possible by using Sophos Central API's. The /endpoint-groups post function allows you to move devices into groups, and the /endpoints get function will allow you to query the status of devices. 

Could you elaborate on what you're looking to do with this? Would Heartbeat be an alternative?

Thankyou Kushal, I'll look into using the API.

I thought it would be easier to group endpoints in bulk depending on certain criteria more than it currently is, especially considering some users have thousands of devices, like we do.

I don't know if I'm wanting to use groups in a way its not designed, but I would like to quickly select and group certain endpoints (depending on a number of different status) that I can then query with Live Discover, and keep a close check on all in one group or similar.