Assign Log Processing Policies

 You must be logged in as an Administrator to take this action.

To assign a Log Processing Policy to a Log Source, the policy must have been created for the Log Source's Log Source Type. LogRhythm includes Log Processing Policies for the System Log Source Types, which are all named LogRhythm Default.

1. On the main toolbar, click Deployment Manager.
2. Click the Log Sources tab.
3. Select the Log Source to which you want to assign a new Log Processing Policy.
4. Right-click the selection, and click Properties.
   The Log Message Source Properties window appears.
5. In the Log Message Processing Settings section of the Basic Configuration tab, click the new Log Processing Policy in the Log Message Processing Engine (MPE) Policy menu.
6. Click OK.