The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

How to avoid flooding the server with duplicate process guard events from endpoints?

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

There is a mechanism to tune the frequency of duplicate events using the events throttling setting in policy. FireEye recommends setting this value to the default 60 minutes or higher for better performance and usability. You can also disable duplicate alerts for throttled events using the alert settings in the server configuration.