Sophos Central icon

Sophos Central

Interact with Sophos Central Firewall Management API

Alert → Perform Action

AI-generated

Summary

Acknowledge or resolve one or more Sophos Central alerts for a tenant by sending the selected action to the alerts API.

Inputs

  • Action — Choose Acknowledge (the default) or Resolve.
  • Tenant — Select a tenant from the list or provide its ID. Partner credentials require a tenant; organization credentials can use the tenant configured in the credentials.
  • Alert ID (required) — Select an alert from the list or provide its ID. You can enter multiple comma-separated alert IDs; the node sends the selected action for each one.

Output shape

A list of items, one per alert ID processed.

Each item's JSON contains the API response for that alert action. Errors stop execution unless Continue On Fail is enabled.

Links

Discussion