Skip to content

Audit Events API

Retrieve audit events.

See the guide for a narrative walkthrough of this API.

Base URL

https://api.central.sophos.com/audit/v1 — Global service in the production environment.

Authentication

Every request carries an Authorization: Bearer header with an access token obtained through the client-credentials flow — see Get started.

Required permissions

This API's operations require one or more of the following, depending on the operation — see each operation's own page for the exact requirement:

  • logs_reports:read

Operations

Audit Events

Download