If you have to replace Trellix ESM, sync it to restore the settings. If you don't have a current database backup, you must also sync the data source, virtual device, and database server settings with Trellix ESM so they can resume pulling events.
From the Trellix ESM dashboard, click
and select More Settings.On the system navigation tree, select the device and click
.On the <device> Properties page, select <device> Information and click Sync.