The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Check if an event is reported back to ePO - On-prem

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

Follow these steps to check if an event is reported back to ePO - On-prem.

  1. Log on to the system as a user with administrator rights.

  2. Navigate to System Tree, and select the system.

  3. Click Threat Events.

    Event is reported back to ePO - On-prem. Click on the Event ID to get more details of the event.

    Note

    Event gets generated when the Report status is enabled for signature.

Related articles
  • Confirm the threat response in ePO - On-prem
    ePolicy Orchestrator - On-Prem > ePolicy Orchestrator - On-prem 5.10.0 Installation Guide > Setting up your ePO - On-prem 5.10.0 environment
  • View Exploit Prevention status from ePO - On-prem
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Exploit Prevention > View the status of Exploit Prevention
  • Checking content update status from ePO - On-prem
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Exploit Prevention > Checking the status of content update task