Sophos has 90 days Administrative Audit logs retention limit.
This limit could be overrided configuring SIEM Tool.
Here they are relative articles
https://www.sophos.com/en-us/legal/sophos-central
https://support.sophos.com/support/s/article/KB-000036372?language=en_US