---
title: Trellix Actions
description: "## Actions for Trellix - ***Send Data to Trellix***. Sends a custom set of Lucidum data to Trellix. ## Use Cases Below are the possible use cases for these actions: - If you want to run Lucidum “headless”, you can…"
url: "https://lucidum.io/docs/trellix_actions/"
updated: "2026-02-10"
category: Actions / List of Actions / T
---

# Trellix Actions

## Actions for Trellix

- ***Send Data to Trellix***. Sends a custom set of Lucidum data to Trellix.

## Use Cases

Below are the possible use cases for these actions:

- If you want to run Lucidum “headless”, you can send relevant data to Trellix on a regular schedule.
- You can send normalized, enriched Lucidum data to Trellix to be indexed, searched, and analyzed.

## Prerequisites

To execute Trellix actions, you must:

- Configure a user account in Trellix with API permissions.

  **NOTE**: The specified account should have **read and write**permissions.

## Workflows

- [Creating a new Configuration and a new Action](https://lucidum.io/docs/overview-of-actions#workflow_for_creating_configurations_and_actions_in_lucidum)
- [Cloning an Existing Action](https://lucidum.io/docs/overview-of-actions#workflow_using_clone_to_create_a_new_action)
- [Creating a new Action from the Location Results page](https://lucidum.io/docs/overview-of-actions#alternative_workflow_for_creating_an_action)
- [Editing a Configuration](https://lucidum.io/docs/overview-of-actions#workflow_for_editing_a_configuration)
- [Editing an Action](https://lucidum.io/docs/overview-of-actions#workflow_for_editing_an_action)
- [Viewing Information about an Action](https://lucidum.io/docs/overview-of-actions#viewing_information_about_an_existing_action_and_executing_an_action_on_demand)

## Trellix Configuration

To create a configuration for Trellix actions:

![trellix_configuration.png](https://lucidum.cloud/docs/trellix_configuration.png)

- ***Configuration Name***. Identifier for the Configuration. This name will appear in the Lucidum Action Center.
- ***URL***. The URL for the Trellix APIs. For examples, https://api.manage.trellix.com.
- ***Client ID***. A client ID for an account with read and write access to the Trellix APIs. For details, see [https://developer.manage.trellix.com/public/mvision/docs/umam](https://developer.manage.trellix.com/public/mvision/docs/umam) and [https://docs.trellix.com/bundle/iam_ag/page/UUID-4b1f4092-b6a2-3cd0-f62e-c2a576e02524.html](https://docs.trellix.com/bundle/iam_ag/page/UUID-4b1f4092-b6a2-3cd0-f62e-c2a576e02524.html). For details on permissions, see [https://developer.manage.trellix.com/public/mvision/docs/apirra](https://developer.manage.trellix.com/public/mvision/docs/apirra).
- ***Client Secret***. A client secret for an account with read and write access to the Trellix APIs. For details, see [https://developer.manage.trellix.com/public/mvision/docs/umam](https://developer.manage.trellix.com/public/mvision/docs/umam) and [https://docs.trellix.com/bundle/iam_ag/page/UUID-4b1f4092-b6a2-3cd0-f62e-c2a576e02524.html](https://docs.trellix.com/bundle/iam_ag/page/UUID-4b1f4092-b6a2-3cd0-f62e-c2a576e02524.html). For details on permissions, see [https://developer.manage.trellix.com/public/mvision/docs/apirra](https://developer.manage.trellix.com/public/mvision/docs/apirra).
- ***Proxy***. If you are using a proxy server to allow this connector to communicate with on-premises devices, enter the IP address: port for the proxy server, usually **192.168.255.6:3128**.
- ***Max # of Records per Payload***. The maximum number of records to send to Trellix in each action. The default value is “50”.

## Manage Action Token

To describe an action token for Trellix actions:

1. Click the token icon.
2. In the Manage Action Tokens page, click the plus-sign in the upper right.

   ![jumpcloud_manage_action_tokens.png](https://lucidum.cloud/docs/jumpcloud_manage_action_tokens.png)

## Create a New Action

To create an action for Trellix, contact Lucidum Customer Care.