The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Maximum cache size

Prev Next

The Maximum Cache Size setting controls the maximum number of unique events the endpoint will hold in its cache before older events are removed. This setting directly affects the memory footprints of the endpoint for the Logon Tracker process. The default cache size is 5,000,000 unique events. Roughly each event requires 300 bytes of storage in the cache. 5,000,000 events will require 1.5 GB of memory.