Is the a document or way to forward logs from Sophos Cloud to on prem SEM?
Engineering found this (thanks Martina!).
Sophos Central provides SIEM Integration Script, and I believe that there can be configured syslog CEF (we support CEF format in the Sophos Central connector) by editing config.ini with the syslog values.
References:
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.