Assign ePO - On-prem tags to events and IP addresses

Assign ePO - On-prem tags to events generated by alarms and views if alarms have ePO - On-prem tags. You can also apply tags to IP addresses.

On the Trellix ESM dashboard, select events with the local network's IP address as "Source IP" or "Destination IP" form Events tab.
On the Events tab, click → Actions → ePO Tagging.
On the ePO Tagging page, select a ePO - On-prem device from the drop-down list.
1. Enter a host name or IP address (supports comma-delimited list).
2. Select Wake up client to apply the tags immediately.
3. Click Assign to apply the selected tags to the IP address.
4. Wait until the panel finishes loading then click Cancel to close the page.