This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Central Alerts disappear after acknowledgement?

[Is there really no Sophos Central User Forum? Just an API forum?]

When you click to Acknowledge an Alert on Sophos Central (SC) for a Firewall that's being managed by SC, it disappears and there appears to be no way to retrieve it. The best I can do is to find an entry in Admin logs saying that I acknowledged it. Am I missing something?

This is critically important for things like debugging. For example, it's not unusual to get an Alert that the Gateway went down and then came back up. So I Acknowledged them. Then figured out that this may have caused a long-running bug I'm working with Sophos Support on. OK, I can just go back and find when the GW went down to see if the bug started then... oops, can't find the Alerts anymore.



This thread was automatically locked due to age.

Top Replies

  • You should see them in Events as well, as Alerts are some sort of important Events. 

    But no, if you acknowledge an alert, it is deleted. 

    You can also work with the Central API and copy them to your system and do what ever you want with them. 
    Email is also possible and store the Alerts. 

    Jump to answer
Parents Reply Children
No Data