Issue with enriching alerts in Event Policy