Skip to main content

Security ContentExabeam Security Content in the Legacy Structure

Defining Field Persistence

The default configuration for persistence is located in the following sections of the content_default.conf file (directory path: /opt/exabeam/config/default/ ):

  • RequiredPersistedEventFields – Specifies the fields that need to be persisted for every event.

  • PersistedEventFields – For each event, specifies the fields that need to be persisted to the database, in addition to the RequiredPersistedEventFields.