Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

API returns endpoints that were deleted using web interface

When fetching all the endpoints using the Sophos Central API, I noticed a discrepancy between the devices count on the Sophos Central interface and the number of items fetched by the API with the type: 'computer'.

Upon further investigation, I recognized the 6 extra endpoints fetched by the API as old ones I had deleted more than 6 months ago using the web interface and now when I try to delete them using the API in order to not have them show up unwanted, I get a 404 Not Found error from the delete request.

Any suggestions on how to deal with ghost endpoints?

delete request example:
URL = {data_region}/endpoint/v1/endpoints/{endpoint_id}
headers = "X-Tenant-ID": "{tenant_id}", 
                "Authorization": "Bearer {token}"

The delete request worked when I tried on an endpoint that still existed on the web interface, returning an empty object.


This thread was automatically locked due to age.
Parents Reply Children
No Data