If you encounter a data loss, you can restore event, flow, and log data from a previous data backup. You can also restore packet and string table data.
The system can only restore backups of files that match system-generated names.
You cannot restore data from a backup of a previous Trellix ESM version. Backups are only compatible with the current version of Trellix ESM.
From the Trellix ESM dashboard, click
.png "menu.png")
and select System Properties.Select → .
Specify a date range (start and end date) for the data you want to restore.
Identify the remote location where the backup file resides (such as, IP address, remote mount point, path, and logon credentials).
Test the connection to ensure that the system can access the remote backup location.
Click OK.
Note
You cannot back up (automatic or manual) or restore data if another backup or restore is already in progress.