Sophos Central

# Sophos Central Data Ingestor The official Sophos developed and supported application for Sophos Central ##Functionality This app will allow you to select and ingest multiple Sophos Central data sources without the need of an accompanying script. Includes Data from the below endpoints. and conforms to the CIM 4.x data model. * Central Endpoints API * Central Alerts API * Central SIEM Events API ## Requirements Requires a Sophos API Service Principal account for authentication see our getting started guide for details on API credential creation. * Getting Started for Enterprise Customers: https://developer.sophos.com/getting-started-organization * Getting Started for Partners: https://developer.sophos.com/getting-started * Getting Started for Tenants: https://developer.sophos.com/getting-started-tenant * Add-on Installation Guide: https://community.sophos.com/sophos-integrations/w/integrations/109/splunk-add-on-for-sophos-central * Feedback and Support Forum: https://community.sophos.com/sophos-integrations/f/splunk-apps-for-central-and-sophos-firewall Use the accompanying Sophos Dashboard App to get insightful dashboards across Central Data, XG data, or both if using both date sources: https://splunkbase.splunk.com/app/6188/