ips-event (Network Security)
- Published on Aug 25, 2026
CEF:0|Trellix|MPS|9.0.0.916432|IE|ips-event|7|externalId=12 rt=Jun 26 2020 13:30:17 UTC proto=tcp
src=xxx.xx.x.xx spt=80 smac=00:17:a4:aa:f4:93 dst=xxx.xx.x.xxx dpt=1043 dmac=00:0c:29:b2:fb:4f cnt=1
cs1Label=sname cs1=Microsoft Internet Explorer XML Processing Memory Corruption act=notified
dvchost=abc.mrl.trellix.com dvc=xx.x.x.xxx cn2=85302399 cn2Label=sid cfp1=12 cfp1Label=signature revision
cs4=https://abc.mrl.trellix.com/notification_ url/ips_events?ev_id\=12 cs4Label=link flexString2=client
flexString2Label=attack mode msg=MVX Correlation Status:N/A cn1=0 cn1Label=vlan
Was this article helpful?
Related articles
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type
Network Security (NX) > Common Security Platform Product Docs > Trellix Alert Notifications ( CEF | LEEF | CSV | XML | JSON ) > CEF notifications > Sample CEF notifications per event type