Linux servers generate a large number of network events. Disabling the Capture UDP Events toggle does not always sufficiently reduce the performance impact on the server due to network event generation. The Capture Network Connection Events toggle disables the capture of all network events and decreases the performance impact on your server. Disabling network event capture reduces the detection of IOCs. It is not recommended unless it is to mitigate a performance issue.
For more about this issue, see the Trellix Community Article.
This section covers how to use the Web UI to enable or disable network event capturing for real-time indicator detection.
Important
On hosts with a high number of events, some events may not be recorded.