Hello, I am trying to raise a request to get Sophos to develop a feature, where the API can also give you the information "last active" from the API response. At the moment, the API only gives the information "last seen", which isn't as up to date as…

Hello everyone, I have started to test the APIs, but when I run the Who Am I, the Unique ID doesn't match the one in my console, every two characters they swap positions. I also use the method from the PC looking for Unique ID in C:\ProgramData\Sophos…

I've searched everywhere, but have not found the answer to exactly how to structure the data array for the API for isolation of multiple systems. When I use the structure documented on the developer site, I can't get anything other than "error": "UnsupportedMediaType…

I've made a request to IBM for official integration between Sophos Central and IBM QRadar SIEM. If you have an interest in this please vote for the request at https://ibmsecurity.ideas.ibm.com/ . Idea: QDSM-I-1640.

Hi there, We're working with the Sophos Apis and we have created a client id and secret. We're using this access token to make requests and to manage devices, but the token expires 1hour after creation (as is expected). The response from this request…

We try to get a list of our tenants with curl.exe -XGET -H "Authorization: Bearer <jwt>" -H "X-Organization-ID: <organization-id>" api.central.sophos.com/.../tenants But the answer is { "error": "Internal Server Error", "correlationId": "a6f54b89-8590…

Hi, We would like to retrieve the list of firewalls. The same as this one: https://cloud.sophos.com/manage/partner/firewall/assign/managed I don't think it's possible yet. Regards, Greg

TL;DR I'm trying to query the list of tenants using the Partner API in Azure Data Factory (ADF). The pagination functionality within ADF relies on there being some sort of reference to the next page in the response to the current page, which isn't the…

Hi, I can see in the documentation that you can POST data about the contact when you create a new tenant. I don't see in the documentation how to retrieve the "contact" information for a specific tenant. Do you plan to expose this kind of data through…

Good morning, I am looking for the URI or downloadable version of the Sophos APIs OpenAPI specifications. Is this publicly available?

Hi We have generated a Splunk API key to integrate with Alerts being sent to Splunk and when we do so the alerts in the Dashboard seem to stop. Is this normal? Do I need to amend the script to stop this from happening? Thanks, Anish

Hi, When I query the endpoints API for health status "bad" no results are returned however there are many servers in Sophos Central that appear with health status "bad" or "medium". What is the relationship between the API health statuses and the…

Hi, at some point today (it worked around 9am today UTC) I stopped being able to query your endpoint in subject. I am able to query woami/v1 to retrieve ID. The response I've just got: "error": "Internal Server Error", "correlationId": "74629146…

Hi, I wanted to try Sophos Central API thus I need to create API credentials. The creation of the credentials works fine but if I add something more than "Test" in the description field like what the API is used for the credentials aren't created. There…

Hi to everyone We're working on a panel for monitoring allocated license for our clients and we should retrieve the number of allocated license for each sub-estates. We're using Sophos Central API for retrieving this kind of info but we can't find…

Hi, We continuously query Sophos Central API endpoints for alerts, events on a 5 minute basis. We've noticed that there are missing logs every day. The next cursor that is returned in every response is used in the next request to query for new data…

Hello, I am currently attempting to query all machines in Sophos Central via API. However there seems to be a max limit of ~500 items. Is there any way around this max limit or any other way to query all endpoints. Any input would be great.