The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

CEF notifications

Prev Next

The Process Tracker module submits a CEF notification for every alert that it creates. For background information on CEF notifications and field definitions, see Alert Notifications CEF | LEEF | CSV | XML | JSON. Also refer to the "Appendix B, CEF Logs and Output" section in the Endpoint Security Server User Guide .