The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Configure data sources

  • Published on Aug 27, 2026
  • 1 minute(s) read
Prev Next

You can specify other data sources for Trellix EDR beyond the endpoint data that is being collected.

Note

This option is not available on ePO - SaaS.

  1. On ePO - On-prem, go to Server Settings → Trellix EDR Settings, then click Edit.

  2. Add your SIEM information, then click Save.

  3. Log on to Trellix EDR as administrator.

  4. Click the configuration icon on the top-right corner to access the Configuration page.

  5. Click Configure data sources to view the list of data sources.

  6. Click Save.