Determine whether events are forwarded immediately or only during agent-server communication.
If the currently applied policy is not set for immediate uploading of events, either edit the currently applied policy or create a Trellix Agent policy. This setting is configured on the Threat Event Log page.
Select Menu → Policy → Policy Catalog, then select Trellix Agent on the Products pane and expand the General category.
Click an existing agent policy.
On the Events tab, select Enable priority event forwarding.
Select the event severity.
Events of the selected severity (and greater) are forwarded immediately to the server.
To regulate traffic, type an Interval between uploads (in minutes).
To regulate traffic size, type the Maximum number of events per upload.
Click Save.