Advanced, time-based, and dynamic enrichment policies
You can use different event policy types to perform actions such as basic event enrichment, event suppression, sending notifications, and so on. Each of these policy types cater to specific use cases for processing events, enriching events, or performing specific actions. In addition to this, you can perform some advanced enrichment, time-based enrichment, and dynamic event enrichment.
To get an overview of the various enrichment scenarios, see Event-enrichment-for-adding-context.
To look at examples of advanced and time-based enrichment, see Examples: Event policies for enrichment, correlation, notification, and suppression.
Consult the following topics for more information about advanced, time-based, and dynamic event enrichment.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*