The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Deleting or restoring all the default event filter rules using the Web UI

Prev Next

Follow these steps to delete all of the default event filter rules from the configuration. You can also restore the event filter rules to the default filter values.

To delete all of the default event filter rules from the configuration:
  1. In the Web UI, choose Settings > Evidence Collector.

  2. Click Event Filters.

  3. Click Default Filters.

    NX_TAPSender_EventFilterDefaultDelete_scap.png
  4. Click Delete All. A confirmation dialog box appears.

  5. Click Yes to confirm that you want to delete all of the default event filters from the configuration.

    The following message appears:

    NX_TAPSender_EventFilterDefaultDeleteConfirm_scap.png
To restore the default event filter rules:
  1. In the Web UI, choose Settings > Evidence Collector.

  2. Click Event Filters.

  3. Click Default Filters.

  4. In the Default Filters area, click Restore.

    The event filter rules are restored to the default filter values.

    NX_TAPSender_EventFilter_Reset_scap.png

    The following message appears:

    NX_TAPSender_EventFilterDefaultRestoreSuccess_scap.png