The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Ingestion

Prev Next

This section provides statistics for the module’s message ingestion processing displayed over various time intervals. The following statistics are available:

  • Events:The number of events (messages) received from endpoints. These values provide visibility into the volume of messages being processed by the server.

  • Filtered:The number of events that dropped based on filter settings (see Host Filtering tab below). It is recommended to use filtering so a value of 0 suggests the module’s current configuration may not be sustainable over time.

  • Parsing Errors: The number of events that were unable to be parsed from endpoints.

    Note

    Parsing errors should not occur under normal operations.

  • Commit Errors: The number of events that were not able to be saved to the database.

    Note

    Commit errors should not occur under normal operations.

  • Avg Topic Lag: The number of events awaiting processing on the message bus. A sustained lag indicates the module is having difficulty ingesting messages fast enough. It suggests policy or configuration changes may be warranted to reduce data volume.