Upgrade a single Trellix ESM from version 11.x

Upgrade your SIEM solution from an 11.x version.

When upgrading, all active collectors stop collecting data until you rewrite the device settings and roll out the policy.

From the Trellix ESM dashboard, click and select More Settings.
Select an Trellix ESM and click Properties .
Click ESM Management.
Select the Maintenance tab, then click Upgrade ESM.
In the Select Software Upgrade File window:
- Select the upgrade file from the list, then click OK.
  Or
- Click Browse to check for a software upgrade file obtained from the download site on your system and then, click Upload.
In Proceed with Upgrade, click Yes to run the upgrade advisor.
The System Advisor Upgrade Check window shows the available online and offline devices along with their respective status.
Click Close in System Advisor Upgrade Check and then, in the Upgrade ESM Software window, click Yes to run the upgrade.
1uzdmTThe Trellix ESM device restarts and all current sessions are disconnected while the upgrade is installed. If you encounter issues during an upgrade, you can restore the backup files or contact Support.
When the upgrade process is complete, refresh the browser.
Clear the browser cache to prevent issues at logon.

A rules update is automatically started after the upgrade. During the rules update:

The application is not available. Wait for the process to finish and refresh the page.
You might see error messages related to 'snowflex' and 'snowman'. Disregard the error messages.