Before you can send messages via email, text message (SNS), SNMP, or syslog, you must first connect Trellix ESM to your mail server. Then you can identify message recipients.
Trellix ESM sends alarm notifications using the SNMP v1 protocol. SNMP uses User Datagram Protocol (UDP) as the transport protocol for passing data between managers and agents.
In an SNMP setup, agents, such as Trellix ESM, forward events to SNMP servers (referred to as Network Management Station [NMS]), using packets of data known as traps. Other agents in the network can receive event reports the same way they receive notifications. Due to size limitations of SNMP trap packets, Trellix ESM sends each report line in a separate trap.
Syslog can also send CSV reports generated by Trellix ESM. Syslog sends query CSV reports one line per syslog message, with the data of each line of the query results arranged in comma-separated fields.