The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Event operation

Prev Next

The Events API provides read access to threat events available in ePO - SaaS. This API provides limited details or summary of DLP incidents. You can see the detailed DLP incident information in Incident Details page.

Note

REST API calls to query and update Trellix DLP – SaaS incident details are not currently supported.

  • Get /api/v2/events API for external clients to query threat events.

    Note

    You can query for threat events if you are using Trellix Endpoint.