Sophos Central - logs FW

Question

Dears, good morning, 
 
 We are setting up a SIEM in the cloud and I am using the SOPHOS API to share the tool's logs. I have already configured API profiles such as reading and forensics and have not been successful. 
 I have already made all the necessary configurations so that SOPHOS Central receives logs from FW SOPHOS, but in my SIEM, client VPN logs and traffic logs in general do not appear, for example. According to the documentation below, there is no "event type" for client VPN, etc. 
 Is there any way for my SIEM to receive logs with complete information about everything that passes through FW? 
 support.sophos.com/.../KB-000038309

Raphael Alganes · Answer

Hello Gustavo Moreira , 
 Thanks for reaching out to Sophos Community. 
 Could you confirm if you have tried to followed this KBA: https://support.sophos.com/support/s/article/KB-000036372?language=en_US - Sophos Central APIs: Send alert and event data to your SIEM. 
 For Client VPN, client connections event type are not yet available. Only 'VPN tunnel down' and 'VPN Tunnel restored' as of the moment. https://doc.sophos.com/central/Customer/help/en-us/ManageYourProducts/Alerts/FirewallAlerts/index.html#connectivity 
 You may reach out to Sophos Support to have this feature requested and be linked under your account registered with Sophos. 
 Many thanks for your time and patience and thank you for choosing Sophos.