Is it possible to perform data enrichment retrospectively - may be after
few days? We have a external ticketing system and after the ticket is
resolved, I'd like the resolution code added to the respective
correlated rule.

If its too complicated, I rather not bother.

Please suggest.

pimpalp's Profile: https://forums.netiq.com/member.php?userid=5587
View this thread: https://forums.netiq.com/showthread.php?t=51938