The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Ingestion

Prev Next

This section provides statistics for the module’s message ingestion processing displayed over various time intervals. The following statistics are available:

  • Events:The number of events (messages) received from endpoints. These values provide visibility into the volume of messages being processed by the server.

  • Filtered:The number of events that dropped based on filter settings (see Host Filtering tab below). It is recommended to use filtering so a value of 0 suggests the module’s current configuration may not be sustainable over time.

  • Parsing Errors: The number of events that were unable to be parsed from endpoints.

    Note

    Parsing errors should not occur under normal operations.

  • Commit Errors: The number of events that were not able to be saved to the database.

    Note

    Commit errors should not occur under normal operations.

  • Avg Topic Lag: The number of events awaiting processing on the message bus. A sustained lag indicates the module is having difficulty ingesting messages fast enough. It suggests policy or configuration changes may be warranted to reduce data volume.