The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Configure a Trellix ESM - ACE to receive events from specific devices

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

Distribute correlation workload by assigning Trellix ESM - ACEs to receive events from a range of device IDs.

Each correlation manager must be configured with a filter that defines a range of Device IDs for that manager. Use only the In operator to define the device range.

  1. Select the Trellix ESM - ACE and click Properties. GUID-F191D568-8B93-4D2C-9BFC-F1342FC407BD-low.png

  2. Click Correlation Management.

  3. Select Use the Correlation Managers' filters to narrow events sent from the Receiver(s).

:

Related articles