You can use a total alert threshold to limit the total number of alerts processed by the Endpoint Security (HX) appliance from Trellix Endpoint Security (HX) Agents in a hit storm.
Setting the total alert message threshold too low may result in the loss of alerts. Setting the threshold too high may cause performance problems on the appliance if a hit storm occurs.
This setting is configured using the CLI. It cannot be configured using the Endpoint Security (HX) Web UI.
Prerequisites
Admin access