The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

CEF notifications

Prev Next

The Process Tracker module submits a CEF notification for every alert that it creates. For background information on CEF notifications and field definitions, see Alert Notifications CEF | LEEF | CSV | XML | JSON. Also refer to the "Appendix B, CEF Logs and Output" section in the Endpoint Security Server User Guide .