The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Data Streaming Bus cluster

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

The Data Streaming Bus (DSB) cluster technology allows you to improve retention and performance. It also increases reliability by adding fault tolerance and data replication. For more information, see Trellix Enterprise Security Manager Installation Guide.

The data is received from the data devices and then sent to the cluster only once.

The devices that can be linked to a cluster are:

  • ERC

  • HA ERC

  • ELMERC

  • ACE

  • ADM

GUID-BFA17F16-ADF8-46C0-9584-54199D4A4820-low.png

All the communication between the cluster is secured with IPsec. Communications from outside the cluster are secured with SSL.

The following are shared between the nodes that form the cluster:

  • Broker organization tasks

  • Data and balance load

  • Configuration and data enrichment.

:
Related articles
  • Data Streaming Bus cluster
    Enterprise Security Manager > Enterprise Security Manager 11.6.x > ESM 11.6.x Product Guide > PG - ESM - Tuning McAfee ESM > Device configuration > Clustering
  • Create a Trellix DSB Cluster
    Enterprise Security Manager > Enterprise Security Manager 11.6.x > ESM 11.6.x Installation Guide > Deploy a Trellix ESM solution on a VM > Add and configure devices > Add and configure Trellix Data Streaming Bus (Trellix DSB) devices
  • Create a Trellix DSB Cluster
    Enterprise Security Manager > Enterprise Security Manager 11.7.x > ESM 11.7.x Installation Guide > Deploy a Trellix ESM solution on a VM > Add and configure devices > Add and configure Trellix Data Streaming Bus (Trellix DSB) devices