The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Disabling event enrichment

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next

When the Disabling Event Enrichment setting is turned on, it will disable advanced enrichment on the endpoints. Advanced enrichment uses multiple sources of event data to enhance events with additional metadata. Disabling the advanced enrichment improves performance of the endpoint.

:
Related articles
  • Disabling the Enricher Module
    Endpoint Security Modules (HX) > Enricher > Endpoint Security Enricher Module User Guide Release 1.5.4 > Configuring the Enricher Module
  • Backfill events
    Endpoint Security Modules (HX) > Logon Tracker > Endpoint Security Logon Tracker Module User Guide Release 1.2.0 > Configuring Logon Tracker > Configuring Logon Tracker agent policy
  • Enrichment Settings
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Configuring the Process Guard Module‌ > Configuring the Process Guard Server Settings‌