New docs portal launching December 21st! All Exabeam, LogRhythm, and API documentation is moving to docs.exabeam.com. Existing links will redirect automatically, but we recommend updating your bookmarks.
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0

Log Processing Policies


Log Processing Policies, or Message Processing Engine (MPE) policies, determine which rules are processed against a Log Message Source and how matching log messages are treated. This includes how long the log remains online for reporting (Time-To-Live), whether the log should be archived, and whether a copy of the log should be forwarded to the Platform Manager.