The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Configure a Trellix ESM - ACE to receive events from specific devices

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

Distribute correlation workload by assigning Trellix ESM - ACEs to receive events from a range of device IDs.

Each correlation manager must be configured with a filter that defines a range of Device IDs for that manager. Use only the In operator to define the device range.

  1. Select the Trellix ESM - ACE and click PropertiesGUID-F191D568-8B93-4D2C-9BFC-F1342FC407BD-low.png.

  2. Click Correlation Management.

  3. Select Use the Correlation Managers' filters to narrow events sent from the Receiver(s).