Place endpoints in Observe mode

After installation, we recommend placing selected endpoints in Observe mode to perform a test run for the product.

Select at least one endpoint for each type you have in your environment.

1. On the Trellix ePO - On-prem console, select Menu → Systems → System Tree.
2. Select a group or an endpoint:
   • Group – Select the group in the System Tree and click the Assigned Client Tasks tab.
   • Endpoint – Select the endpoint on the Systems page and click Actions → Agent → Modify Tasks on a Single System.
3. Click Actions → New Client Task Assignment to open the Client Task Assignment Builder page.
4. Select Solidcore 8.x.x → SC: Observe Mode, then click Create New Task to open the Client Task Catalog page.
   1. Specify the task name and add any descriptive information.
   2. (Optional) Specify a workflow ID tag to label the events generated during Observe mode.
   3. Click Save, specify scheduling details, then click Next.
   4. On the Schedule page, specify scheduling details, then click Next.
5. Review the task details, then click Save.
6. (Optional) Wake up the agent to send your client task to the endpoint immediately.