Sophos Endpoint Security Asset Load package

The best practice for the Sophos Endpoint Security Asset Load provides you with the information that you need to complete  and run the integration successfully, and gain visibility of the data that is ingested by Oomnitza.

The following items are in the package:

• The Integration
• The Data Model fields
• The Credentials
• The Roles
• The Saved Searches
• The Dashboards

For the integration to run, information such as authorization and integration values, must be added or updated. 

Updating integrations and credentials

You must update the integration details and credential details sections. 

In the Integration details section, you might want to change the value selected for Integration preference. If this is the first time that you have run the integration, select Create & Update.  

See Extended Connector for Sophos Endpoint Security 

Update the values for the data region and tenant ID global variables.  

1. Log into Oomnitza.
2. From the Configuration menu, click General > Global Settings.
3. Update the values for the following global variables:
   • Sophos.DataRegion
   • Sophos.TenantId 
4. Save your changes.

Add new fields to the Assets view

New fields that are ingested by Oomnitza may not be automatically listed on the Assets page.

Add new fields to the Assets page

1. Click Assets.
2. Click Add.
3. Click Configure the view .
4. Click + Add Fields.
5. Select the fields that you want to add and click ADD.
6. Click List View Configs.
7. Select the fields.

TipIf you decide to add the fields to the target instance, create a group in screen builder for the integration and then add the fields to the group. For further information see Creating Field Groups.