The alarms are not being enriched

Products

• DX SaaS

Issue/Introduction

An enrichment rule has been created, but we don't see the effect on the alarms.

Resolution

The severity field the value had given manually by adding a | separator for each value like "Critical|Suppressed|Major|Minor".  Defining the rule with OR operator resolved the issue.

(Severity: Contains 'Critical' OR Severity: Contains 'Major' OR Severity: Contains "Minor")