Advanced, time-based, and dynamic enrichment policies
You can use different event policy types to perform actions such as refinement, basic event enrichment, event suppression, sending notifications, and so on. A refinement policy is similar to an advanced enrichment policy. Each of these policy types cater to specific use cases for processing events, enriching events, or performing specific actions. In addition to this, you can perform some advanced enrichment, time-based enrichment, and dynamic event enrichment.
To get an overview of the various enrichment scenarios, see Event-enrichment-for-adding-context.
To look at examples of refinement, advanced enrichment, and time-based enrichment, see Examples: Event policies for enrichment, correlation, notification, and suppression.
Refer to the following table to learn more about refinement, advanced, time-based, and dynamic event enrichment:
Goal | Reference |
|---|---|
Learn the various policy workflow elements of advanced and time-based enrichment policies. | |
Actions are conditions that are run sequentially on each event. Learn different actions that you can use to build the policy workflow. | |
Use functions to modify slot values and retrieve information related to slot values. Learn about functions that you can use to perform advanced event enrichment. | |
Build a policy workflow by using actions and functions. | |
Enrich an event with external data by performing enrichment based on multiple If-Then scenarios in an external source file. |