When installing Trellix EDR 184.108.40.2063 on Redhat Linux 7.9 we noticed that Auditd service crashes.
We were able to identify that Trellix EDR Trace feature is responsible for this crash.
According to the product documentation of Redhat the Auditd service only can forward events to one destination service.
With https://kcm.trellix.com/corporate/index?page=content&id=KB92460 a knowledge base article was already published that there is an incompatibility issue with ACC and Auditd.
Do we have the same issue with Trellix EDR Trace feature?
A confirmation of the product team is much appreciated.