Sophos Endpoint Protection Log Ingestion Issue

Brass Contributor



I have recently integrated 'Sophos Central' using 'Sophos Endpoint Protection' connector with sentinel. It only ingested logs at the time when the connector was connected but since then no log has been ingested. What could be the issue?




4 Replies
Have you checked the function's log to see if there is an error message?

@GBushey hello, I am getting the following error:




Looks like the Workspace ID that was set for the function to use is wrong. Maybe someone changed it?
It was the correct Workspace ID added but I still added it again. SAME ERROR!!