The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Enabling or disabling the appliance to generate message tracking events

Prev Next

Use the CLI commands in this topic to enable or disable the Email Security - Server appliance to generate a message tracking event to show the sender email address, recipient email address, subject, attachment, and URL in the notice-level syslog message for each email scanned by the Email Security - Server appliance. Notice-level syslog messages are generated if the verdict is known by the appliance. By default, the email attributes are not logged and displayed in the notice-level syslog messages.

Note

You can enable or disable message tracking events only using the CLI.

Prerequisites

  • Administrator or Operator access to the Email Security - Server appliance.

To enable message tracking events:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Enable generating a message tracking event to show the email attributes in the notice-level syslog message.

    hostname (config) # email-analysis policy message-tracking syslog-enable
  3. Save your changes.

    hostname (config) # write memory
To disable message tracking events:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Disable message tracking to hide the email attributes in the notice-level syslog message.

    hostname (config) # no email-analysis policy message-tracking syslog-enable
  3. Save your changes.

    hostname (config) # write memory