If you are using Case Management version
9.0
, you should refer to this pageRecovery- Enrich Non-Enriched Observables
This Workflow enriches observables that have not been enriched before. It does not re-enrich observables that are already enriched.
Recovery- Handle Unprocessed Alerts
This workflow attempts to reprocess alerts that were not fully processed, such as those affected by missing or incorrect templates. It is intended to be used as a recovery step if alert processing fails or after a missing or broken template has been added.