Forum for Sophos Splunk Apps

It will be added the possibility to add multiple API key for differente sub-estates to the configuration menu?

In our case we have two sub-estates so to collect all the logs from the sophos central console we need to add two pairs of API key, and as of now is not possible.

Best Regards,

Giovanni

Hi Giovanni, thank you for your inquiry.  Is it safe to assume you have a parent enterprise account that both of these sub-estates are linked to?  If that is indeed the case, you can generate the API credentials from the parent account and retrieve data for all of your sub-estates from the single credential.

Hi Giovanni, thank you for your inquiry.  Is it safe to assume you have a parent enterprise account that both of these sub-estates are linked to?  If that is indeed the case, you can generate the API credentials from the parent account and retrieve data for all of your sub-estates from the single credential.