The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Add Trellix Active Response data enrichment sources

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

You can add data enrichment sources to Trellix ESM that are populated with Active Response search results.

Add a ePO - On-prem device with Active Response to Trellix ESM.

  1. From the Trellix ESM dashboard, click menu.png and select More Settings.

  2. On the system navigation tree, select Trellix ESM and click Settings.png.

  3. Click Data Enrichment, then click Add.

  4. Complete the requested information on the Main tab.

  5. On the Source tab, select Active Response in the Type field, then fill in the requested information.

  6. Complete the information on the remaining tabs, then click Finish.

The source is added and the data you specified is enriched with the Active Response data.

Note

The Active Response type is not listed if the Trellix ESM fails to pull the Active Response collectors over DXL.

Related articles