New docs portal launching December 21st! All Exabeam, LogRhythm, and API documentation is moving to docs.exabeam.com. Existing links will redirect automatically, but we recommend updating your bookmarks.
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0

Identity Tab

The identity tab contains metadata fields related to the user associated with the action or object in the log.

The following fields are on the Identity tab:

This tab contains one polyfield: User (Impacted).

This tab contains four Identity Analytics fields: User Identity (Origin), User Identity (Impacted), Sender Identity, and Recipient Identity.

Identity Analytics fields aggregate multiple identifiers for a user/email into a single unique ID. Each Identity Field is mapped to the corresponding MPE metadata field described in this section. These fields are not available for parsing. For more information about Identity Analytics fields, see Identity-Derived Data.