You can configure Trellix EDR with SIEM for real-time visibility to all activity on your systems, networks, database, and applications.
Log on to ePO - On-prem as an administrator.
Select Menu → Configuration → Server Settings → Trellix EDR Settings.
Click Edit (bottom-right corner).
In the SIEM Connection section, add the following:
The host. For example, https://.
Note
Port is not needed for Trellix ESM connection.
The user account you created earlier and the password.
Click Test Connection.
You see a message indicating successful connection to the SIEM.