The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Module overview

Prev Next

Event Streamer is an Endpoint Security Innovation Architecture (IA) module that forwards Windows event log data and the contents of various Windows server log files to Helix and third-party servers supporting the Syslog protocol.

This module supports configurable streaming of all Windows event logs data and various Windows server feature logs to Helix or to a custom server using the Syslog protocol defined by RFC 5424. The data is recorded locally by the agent module and then streamed to the destination servers based on its configuration. It communicates with an Endpoint Security server for module settings.