Hi Brian,
I end up using the scripts sophos have https://github.com/sophos/Sophos-Central-SIEM-Integration
Created 2 cron schedules to run the 2 python scripts to generate the files and monitored each one of the files on the inputs.conf. Workaround till the TA is fixed.
... View more