Event Policies Not Producing Expected Actions

Symptom:

Deployed event policies are not producing the expected actions. For example, enrichments are not occurring.

Solution:

Perform the following actions:

See the section about error messages for help interpreting any errors that appear while creating policy.
Verify that a file for the policy exists in the SOI_HOME\resources\EventManagement\Policies directory. Print this file for a record of the raw policy syntax.
Enable detailed transformation policy logging for a more granular view of connector and event policy operations. The SOI_HOME\log\eitransform.log file includes operations that even policies add. This log file helps you find out whether the information is processed correctly. Enable detailed transformation logging in the eitransform.log file before you can start using it for troubleshooting your event policy. You can track individual operations that occur based on your event policies. For example, you can see whether trap properties are being normalized properly.
If you changed the enrichment connection information (for example, edited script parameters), restart the CA SAM Integration Services service.
Policies that you create through the user interface do not support aspects of certain actions, such as combining include and exclude filters. If the user interface does not provide the functionality that you require, consider refining your policy manually.