You can use SIEM as a data source beyond the endpoint data collected for Trellix EDR.
Log on to Trellix EDR with as administrator.
Click the configuration icon on the top-right corner to access the Configuration page.
Click Configure Data Sources.
On the right panel, select SIEM.
From the 'Select a SIEM' drop-down list, choose ESM.
Click Save, Refresh.
You see a message stating the connection is successful.