As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Products with MER tool downloads NOTE:These tools are for Trellix programs that use non-Windows operating systems. To collect MER data, download the appropriate MER tool:
Select a download option from the drop-down list for Windows or Linux, and click Download:
NOTE: If you log on to the ServicePortal, you can also choose to have the WebMER tool sent to you by email.
Windows — Select from the following three download formats:
EXE
ZIP
ProtectedZip NOTE: The password for the ProtectedZip is secret. If you download the Zip or ProtectedZip file, you must extract the tool to use it.
Linux — Select one of the following downloads:
SolidCore_LinuxMER
GSD_LinuxMER
Run the tool on the computer for which you need the report:
Right-click Mer.exe, and select Run as Administrator. NOTE: If you downloaded a ZIP file, you need to extract the Mer.exe file first.
Select the Language.
Click I accept the 'End user License Agreement', and then click Next. By default, WebMER detects the installed products that use Auto-Detect product(s).
(Optional) If you need to select MER results for specific products, choose Select product(s) and then select the products you want.
Click Start and wait for the WebMER tool to complete.
Specify the location at which to save the <Computer_Name>_X.tgz file, and then click Save.
NOTE: If the WebMER tool is run multiple times, the file name increments the value X by 1.
WebMER log file:
Log file location: %TEMP%\WebMERClient.log
The above typically resolves to the below directory: C:\Users\\AppData\Local\Temp\WebMERClient.log
Upload the WebMER results to Trellix:
When you’re prompted to Upload to Trellix, click Yes.
In the SR # field, type your Service Request (SR) reference number.
In the Email Address field, type your email address for this request.
Click Upload. A file is uploaded to the SR with the following file name: <Computer_Name>_<Service_Request_Number>X.tgz. Files uploaded in this way are attached to the provided SR automatically, and are viewable on the ServicePortal.
Custom Sanitization
Download and open the WebMER client.
At the bottom of WebMER product selection page, click Configure, to access the Custom Sanitization Settings options.
Use either of the following options to achieve custom sanitization. Provide a regular expression in Boost Perl syntax:
Enter regular expression (comma separated)
Choose a regular expression file path NOTE: A user can select to browse to a text file (.txt format) that contains the regular expressions. Each line in the text file contains only one regular expression.
Click Save, and then click Start.
The regular expressions a user must follow are 'boost regular expressions of Perl syntax type'.
You can run the WebMER tool from Windows Explorer, but you can also start it from a command line. When you run the MER tool from the command line, you can use the following parameters:
Switch
Function
/save [path]
Saves MER results to the full path specified.
/help or /?
Provides help for the command line.
/listproducts
Lists supported products.
/detected
Collects MER for installed Trellix products.
/prods
Selected products for running MER.
/logs
Number of days of Application Logs, System Logs, and Security logs, to collect. Specify -1 to avoid collection for any of the event logs.
/silent
The MER tool runs in silent mode.
/sanitize
Remove IP address, MAC address, Domain names, and Computer names from the MER result file.
/sr[SR number]
Upload results to the provided SR number.
Example 1: MER.exe /detected /save c:\mer.tgz /silent
Example 2: MER.exe /prods "VirusScan Enterprise" /save c:\mer.tgz
Example 3: MER.exe /detected /save c:\mer.tgz /sr 1-123456789 /sanitize
