Skip to content


The logs that you can see depend on your license.

Go to Reports.

The following logs are available:

Events. All events on your devices, see Events.

Malware and PUAs blocked. A simplified version of the Events log. It shows the malware and potentially unwanted applications (PUAs) that we have detected and blocked.

Audit Logs. A record of all activities that are monitored by Sophos Central. Access to this log is dependent on your administrator role, see Audit Logs.

Data Loss Prevention. All events triggered by data loss prevention rules for computers or servers, see Data Loss Prevention Events Log.

Message History. The email messages processed by Email Security for your protected mailboxes, see Message History Report.