The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

How to avoid flooding the server with duplicate process guard events from endpoints?

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

There is a mechanism to tune the frequency of duplicate events using the events throttling setting in policy. FireEye recommends setting this value to the default 60 minutes or higher for better performance and usability. You can also disable duplicate alerts for throttled events using the alert settings in the server configuration.

Related articles
  • Event Throttling
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Configuring the Process Guard Module‌ > Configuring the Process Guard Agent Policy‌
  • Alert Settings
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Configuring the Process Guard Module‌ > Configuring the Process Guard Server Settings‌
  • Process data where throttling is initiated
    Application Control and Change Control > Application and Change Control 6.x > Trellix Application and Change Control 6.6.x - Linux Product Guide > Maintaining your systems > Maintaining your system in a managed environment > Administering throttling for your enterprise