Move a Trellix SIEM virtual machine (VM) to a different host.
Observe these cautions for the process:
Do not copy the Trellix SIEM VM. It must be moved.
Do not move a running Trellix SIEM VM. Applies to vMotion in VMware and Live Migration in Azure.
If your hypervisor has a feature that dynamically moves running VMs, the Trellix SIEM VM must be excluded from this feature. (An example is VMware Distributed Resource Scheduler (DRS).)
Prepare your Trellix SIEM VM for migration. If the IP addresses or routes need updating, update these settings now. See "Managing network interfaces" in the Product Guide for more information.
Shut down your Trellix SIEM VM.
Move the Trellix SIEM VM from one host to the other, adjusting the appropriate hypervisor configuration files as needed.
Start the Trellix SIEM VM and monitor it to make sure it starts successfully. If it does not start successfully, record any errors and revert the changes. Use the console view (Ctrl+Alt+F12) to check and record. If errors were encountered, contact Technical Support and open a service request for assistance.