The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

The ESM dashboard

  • Published on Sep 12, 2026
  • 1 minute(s) read
Prev Next

The Trellix ESM dashboard is a visual tool that represents data in a form that enables you to find possible threats.

A view (or dashboard view) is the part of an ESM dashboard containing widgets (e.g. tables, graphs, dials) that help you visualize your data (events and flows).

The dashboard opens to the default view and you can build your own views to investigate potential threats unique to your organization

Build multiple dashboard views that enable you to pivot, explore, investigate, and respond to potential threats.

GUID-962C6954-DD27-463B-82FE-E729162F495F-low.png

  1. Populate your dashboard with predefined views or your own custom views.

  2. Navigate between views quickly using tabs. Use tabs to explore potential threat across multiple views while still retaining the historical context that has initiated the investigation in a separate tab.

  3. Use the filter ribbon to find what you're looking for in query results using real-time functionality. Autocomplete returns results as you build the filter query.

  4. Build multiple dashboard views that enable you to pivot, explore, investigate, and respond to potential threats.

  5. Represent and drill-down to specific data quickly using interactive, visual widgets.

  6. Investigate open incidents without leaving the dashboard, giving you quick access to critical incident details.

  7. Respond to unacknowledged, triggered alarms and system notifications.

: