Useful CLI commands for Trellix Intelligent Virtual Execution https://thrive.trellix.

com/s/article/KB97021

Home (/s/) Knowledge (/s/customknowledge) Tools (/s/tools) Download (/s/downloads) Support (/s/case/Case/Default) Resources (/s/resources)

Related Articles
Useful CLI commands for Trellix Intelligent Virtual Execution Adding Node to a New Cluster Fails in VX Appliance, Why? (/s/
596
article/000003780)
Feb 18, 2025 Article

How to Generate and Retrieve Logs from FireEye Virtual

674
Solution Execution (VX) (/s/article/000003465)

Environment
VX Hangs After Upgrading to 8.3.0 (/s/article/000002761) 416
• Trellix Intrusion Virtual Execution (IVX) -Server
• Trellix IVX - Cloud
How to Upgrade VX Clusters to Version 9.1 (/s/arti-
1.84K
Summary cle/000003630)

The following is a list of useful CLI commands to use on the Intelligent Virtual Execution (IVX) appliance.
How to Configure Preferred Clusters on Sensors in VX
Note: These CLI commands and more can be found on the Documentation Portal (https://docs.trellix.com/bundle/fe-virtual-execution/page/ 881
Appliance (/s/article/000003722)
UUID-bcc5cf01-b11e-da5f-d6fa-7279aae7c26a.html), in the CLI Command Reference under mvx cluster and mvx node.

• Create a cluster
• Delete a cluster Trending Articles
• Attach a node to another node belonging to a specified cluster
Customer Product Upgrade and Migration
• Remove the local node from the cluster
• Remove the local node with force (/s/article/000013872)
• Enable broker role on the local node
• Enable broker role on a remote node Supported Platforms for Trellix Endpoint Security for Windows
• Disable broker role on the local node (/s/article/KB82761)
• Disable broker role on a remote node
• Show cluster status
Trellix Intrusion Prevention System signature set updates
• Show cluster details
(/s/article/KB55446)
• Show node satus
• Show node details
Supported platforms for Trellix ePolicy Orchestrator
Prerequisite: To run these commands, you must be in configure terminal (config) mode. To access config mode, do the following:
(/s/article/KB51569)

hostname > enable

ENS Supported Microsoft Windows Operating Systems
hostname # configure terminal
(/s/article/000013233)
hostname (config) #

Create a cluster
Ask a Question
hostname (config) # mvx cluster <new_cluster_name>

Delete a cluster
To learn more about Trellix products:

•Register for free Webinars (https://training-

hostname (config) # no mvx cluster <cluster_name> catalog.trellix.com/?
utm_source=kb&utm_medium=web&utm_campaign=ES
Attach a node to another node belonging to a specified cluster
•Visit Education Services (https://www.trellix.com/
Example: about/webinars/?
There are two nodes: VX1 and VX2. To add VX2 to the same cluster as VX1, run the commands below: utm_source=kb&amp;utm_medium=web&amp;utm_campaig

1. On VX1, run the command below:

hostname (config) # mvx cluster access-token generate

2. Copy the access token generated in the previous step and run the command below on VX2:

hostname (config) # mvx node attach to <cluster management IP address> access-token <access-token>

Remove the local node from the cluster

hostname (config) # mvx node detach

Remove the local node with force

hostname (config) # mvx node detach force

Enable broker role on the local node

hostname (config) # mvx node broker enable

Enable broker role on a remote node

hostname (config) # mvx node <node_name> broker enable

Disable broker role on the local node

hostname (config) # no mvx node broker enable

Disable broker role on a remote node

1 of 4 5.03.2025, 00:41
Useful CLI commands for Trellix Intelligent Virtual Execution https://thrive.trellix.com/s/article/KB97021

hostname (config) # no mvx node <node_name> broker enable

Show cluster status

hostname (config) # show mvx cluster status

Example output:

vx-13 (config) # show mvx cluster status

MVX Cluster Status

Cluster Name : test

Cluster Version : 10.0.0
Cluster Health : ready
Cluster Size : 1
Cluster Utilization : 0 %

Certificate Info:

Certificate : self-signed-cluster-cert
CA : self-signed-cluster-ca-cert
Validity:
Starts : 2024/01/27 09:33:18
Expires : 2034/01/26 09:33:18
Expiration Time : 3614 days remaining

Show cluster details

hostname (config) # show mvx cluster status detail

Example output:

vx-13 (config) # show mvx cluster status detail

MVX Cluster Status

Cluster Name : test

Cluster Version : 10.0.0
Cluster Health : ready
Cluster Size : 1
Cluster Utilization : 0 %

Certificate Info:

Certificate : self-signed-cluster-cert
CA : self-signed-cluster-ca-cert
Validity:
Starts : 2024/01/27 09:33:18
Expires : 2034/01/26 09:33:18
Expiration Time : 3614 days remaining

MVX Cluster Nodes:

Node Name : vx-13

Node Health : ready
Node Role : broker
SSH port : 22
Node Utilization : 0 %

Show node status

hostname (config) # show mvx node status

Example output:

2 of 4 5.03.2025, 00:41
Useful CLI commands for Trellix Intelligent Virtual Execution https://thrive.trellix.com/s/article/KB97021

vx-13 (config) # show mvx node status

MVX Node Status:

Node Name : vx-13

Node Version : 10.0.0
Node Role : broker
Submission Interface : ether1
Submission Address : xx.xx.xxx.xx
Cluster Interface : ether1
Cluster Address : xx.xx.xxx.xx

Health Information:

Node Health : ready

Sensor Information:

Number of connected sensors : 0

Cluster Broker Nodes:

Cluster Name : test

Node Name : vx-13 (self)

Last Connection Attempt : N/A
Connection Last Formed : N/A
Connection Last Broken : N/A

Show node details

hostname (config) # show mvx node status full

Example output:

vx-13 (config) # show mvx node status full

MVX Node Status:

Node Name : vx-13

Node Version : 10.0.0
Node Role : broker
Submission Interface : ether1
Submission Address : xx.xx.xxx.xx
Cluster Interface : ether1
Cluster Address : xx.xx.xxx.xx

Health Information:

Node Health : ready

Detailed Health Information:

CCD Ok : yes.
MvxClient Ok : yes. Healthy
Guest Images Ok : yes. Installed
Notification Client Ok : yes. Healthy
WSAPI Ok : yes. Running
Queuemgr Ok : yes. Healthy

Sensor Information:

Number of connected sensors : 0

Cluster Broker Nodes:

Cluster Name : test

Node Name : vx-13 (self)

Last Connection Attempt : N/A
Connection Last Formed : N/A
Connection Last Broken : N/A

Article Number
000013140

Last Modified Date

2/18/2025 2:14 PM

Was this article helpful? 0 0

Attachments

3 of 4 5.03.2025, 00:41
Useful CLI commands for Trellix Intelligent Virtual Execution https://thrive.trellix.com/s/article/KB97021

Files (0)

PRODUCT CATEGORIES ABOUT SUPPORT CONTACT US

XDR Engine (https://www.trellix.com/en- Why Trellix? (https://www.trellix.com/ Contact Support (https://thrive.trellix.com/s/ Trellix (https://www.trellix.com/en-
us/products/xdr.html) en-us/about/why-trellix.html) article/KB95597) us/contact-us.html)

Endpoint Security (https:// About Us (https://www.trellix.com/en- Product Downloads (https://www.trellix.com/ Skyhigh Security (https://
www.trellix.com/en-us/platform/endpoint- us/about.html) en-us/downloads/my-products.html) www.skyhighsecurity.com/en-us/
security.html) Leadership (https://www.trellix.com/en- Product Documentation (https:// about/contact-us.html)

SecOps and Analytics (https:// us/about/leadership.html) docs.trellix.com/)

www.trellix.com/en-us/platform/secops- Careers at Trellix (https:// Product End-of-Life (https://www.trellix.com/
analytics.html) careers.trellix.com/) support/end-of-life-products/)
Data Protection (https://www.trellix.com/ Corporate Social Responsibility (https:// Submit a Sample (/s/case/Case/Default)
en-us/platform/data-security.html) www.trellix.com/en-us/about/csr- FireEye Market (https://fireeye.market)
Network Security (https:// sustainability.html)
www.trellix.com/en-us/platform/network- RESOURCES
detection-and-response.html) NEWS AND EVENTS
Security Awareness (https://www.trellix.com/
Threat Intelligence (https:// Newsroom (https://www.trellix.com/en- en-us/security-awareness.html)
www.trellix.com/en-us/platform/threat- us/about/newsroom.html)
Advanced Research Center (https://
intelligence.html) Press Releases (https://www.trellix.com/ www.trellix.com/en-us/advanced-research-
Collaboration Security (https:// en-us/about/newsroom/press- center.html)
www.trellix.com/en-us/platform/ releases.html)
Training and Education (https://
collaboration-security.html) Blogs (https://www.trellix.com/en-us/ www.trellix.com/en-us/services/education-
Cloud Security (https://www.trellix.com/ about/newsroom/stories.html) services.html)
en-us/platform/cloud-security.html) Webinars (https://www.trellix.com/en- Communication Preferences (https://
us/about/webinars.html) www.trellix.com/en-us/contact-us/
Request a Demo (https://www.trellix.com/
en-us/contact-us/demo-request- Events (https://www.trellix.com/en-us/ communication-preferences.html)
form.html) about/events.html) Service Status (https://status.trellix.com/s/)
View All Products (https://
www.trellix.com/en-us/products.html)

Copyright © 2024 Musarubra | Privacy (https://www.trellix.com/en-us/about/legal/ | Legal (https://www.trellix.com/en-us/about/ | Terms of Service (https://www.trellix.com/en-us/about/legal/website-terms-
US LLC privacy.html) legal.html) of-service.html)

4 of 4 5.03.2025, 00:41