How to run basic endpoint reports for the previous 12 months?

Only the last 90 days of events is retained.

http://docs.sophos.com/sophos-cloud/customer-dashboard/help/en-us/webhelp/index.htm#general/Events.htm

To retain more you would need to export the data manually to say csv or query the API on an ongoing basis to extract data into your system.

Regards,

Jak

Hi Sam, 

Unfortunately, there are some limitations for the duration of the report generated via Sophos Central. Please find below the image for your reference:

Except for the log under Web Gateway, others generate a report for a maximum of 90 days only. The alternate way of generating the report according to your requirement is by using security information and event management (SIEM). Please refer to the articles Sophos Central APIs: How to send alert and event data to your SIEM and Sophos Central: FAQ on SIEM. Let me know if this helps resolve your query.

Hi Jak,

Thanks for your reply, much appreciated

Hi Haridoss,

Thank you for your reply, i will have a look into this.

For now, the quarterly statistics will suffice, and then i can move onto larger ones with the API work hopefully.

KR