Troubleshooting log enrichment

The enrichment_audit field is not added to the collected logs


The criteria configured in enrichment policy does not match the logs.

Enrichment is not added to logs


Check the enrichment_audit field in logs and check the status added to the field. For information about these status, see Creating enrichment policies.

Was this page helpful? Yes No Submitting... Thank you