The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Module overview

Prev Next

Event Streamer is an Endpoint Security Innovation Architecture (IA) module that forwards Windows event log data and the contents of various Windows server log files to Helix and third-party servers supporting the Syslog protocol.

This module supports configurable streaming of all Windows event logs data and various Windows server feature logs to Helix or to a custom server using the Syslog protocol defined by RFC 5424. The data is recorded locally by the agent module and then streamed to the destination servers based on its configuration. It communicates with an Endpoint Security server for module settings.