- Welcome to Exabeam Security Content
- What is Security Content?
- Common Information Model
- What is the Common Information Model?
- Common Information Model Context Elements
- Common Information Model Interface
- Common Information Model Event-naming Format
- Common Information Model Impact on Downstream Processes
- Using the Common Information Model to Create Custom Content
- Transitioning to the Common Information Model
- Understanding the Log
- Exabeam Parsers
- Exabeam Event Building
- Exabeam Enrichment
- Exabeam Persistence and Templates
- Exabeam Models
- Exabeam Rules
PrevNext
Exabeam Persistence and Templates
Persistence saves the existence of a parsed and enriched field in the Mongo database so that it can be used to display fields associated with events in the UI. Event templates define how fields associated with an event are displayed in the UI.
The following sections describe how persistence and event templates work.