Troubleshooting log enrichment

The enrichment_audit field is not added to the collected logs

Resolution

The criteria configured in enrichment policy does not match the logs.

Enrichment is not added to logs

Resolution

Check the enrichment_audit field in logs and check the status added to the field. For information about these status, see Creating enrichment policies.