The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

events section settings

  • Published on Sep 8, 2026
  • 1 minute(s) read
Prev Next

The events section settings control how Endpoint Security (HX) xAgent handles real-time events and intelligence downloads.

Select a setting from the table below to go to the edit methods Trellix supports.

Setting Key

Default

Supported Edit Methods

Web UI

CLI

API

active_collection_enabled

true

Yes

Yes

Yes

excludedPaths

---

Yes

Yes

Yes

excludedProcessNames

---

No

No

Yes

intel_poll_sec

900

Yes

Yes

Yes

intel_uri

/content/v1/intel/default/win_iocv2

No

Yes

Yes

max_db_size

100

No

No

Yes

storage_mode

---

No

No

Yes

udp_send_events

false

No

No

Yes

: