I just installed your app version 1.0.2.
Very cool by the way!
I noticed that I was not getting my alert logs. I found that in Line #2 of bin/sophos_alerts.py there was a missing "i" for import.
Also had to remove the reverence to 'name' in the print line #87.
I also noticed on the first run the cursor is set to empty
cursor="" #set the cursor to empty
Which then the default is pulling data 24 hours in the past. So my logs were never in real time, but a day ago.
Should this be updated to send the "from_date" option the first time? Unless the logs will sloowly catch up to real time? I didn't wait long enough to find out. 🙂