You can configure activity, debug, and event logging, which you can use to determine if you need to change settings to enhance protection or improve system performance.
Task
Select Menu → Policy → Policy Catalog, then select Endpoint Security Common from the Products list in the left pane.
From the Category list in the right pane, select Options.
Click the Edit link for an editable policy.
Click Show Advanced.
Configure Client Logging settings on the page.
For more information on the Client Logging settings, see Advanced options in the Trellix Endpoint Security (ENS) 10.7.x Interface Reference Guide.
Click Save.