The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Back-filled Events Timestamp

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

Depending on the configuration, Linux event timestamps may not include the year. To deduce the correct year for back-filled events, the last modified timestamp is used as a starting point. This is a best effort to determine the correct year for the events. It may not be accurate in all cases.

Related articles
  • Back-filled events timestamp
    Endpoint Security Modules (HX) > Logon Tracker > Endpoint Security Logon Tracker Module User Guide Release 1.2.0 > Module overview > Logon data sources
  • Back-filled events timestamp
    Endpoint Security Modules (HX) > Logon Tracker > Endpoint Security (HX) Logon Tracker Module User Guide 1.3.x > Module overview > Logon data sources
  • Linux Events
    Endpoint Security Modules (HX) > Logon Tracker > Endpoint Security Logon Tracker Module User Guide Release 1.1.9 > Module Overview > Logon Data Sources