Dynamic data enrichment policies troubleshooting
You can use the following methods to troubleshoot the dynamic data enrichment policies that you have defined:
- Enable Match Tracing in the Dynamic Enrichment Policy Details tab to add diagnostic notes to the event.
- Access the History tab and check the Operations Log to determine the dynamic data enrichment policy that added the information into the event.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*