This section describes how to enable data streaming types that are disabled by default.
Note
Alert and health statistics data streaming and the inclusion of OS changes in alerts is enabled automatically when Trellix Helix mode is enabled on an appliance.
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
To enable submission metadata streaming:
hostname (config) # datastreaming helix submission-metadata enable
To enable email metadata streaming:
hostname (config) # datastreaming helix email-metadata enable
To enable appliance statistics streaming:
hostname (config) # datastreaming helix appliance-stats enable
To enable sysinfo metadata streaming:
hostname (config) # datastreaming helix sysinfo-metadata enable
Note
This step is optional. Sysinfo metadata streaming is enabled automatically when Trellix Helix mode is enabled on the Endpoint Security (HX) appliance.
To enable Storytime metadata streaming:
hostname (config) # datastreaming helix storytime-metadata enable
To enable localsig metadata streaming:
hostname (config) # datastreaming helix localsig-metadata enable
Verify your changes:
hostname (config) # show datastreaming helix
Save your change:
hostname (config) # write memory
Use the following commands as needed:
no datastreaming helix submission-metadatano datastreaming helix email-metadatano datastreaming helix appliance-statsno datastreaming helix sysinfo-metadatano datastreaming helix storytime-metadata enableno datastreaming helix localsig-metadata enable