Hi Idan,
In your strategy settings (for the strategy the alert is created in) what is the number of levels that the workspace is supposed to traverse when it is generated? It is configurable, but it is often set to 0 because the search query that builds the workspace is run during alert generation and that can be time consuming if you are generating a lot of alerts at once.
If you change the visualization of the workspace from network to list, what is displayed? Does it just show the alert and the entity or does it show the alert, the entity and the 9 other related entities in the list?
Thanks,
Austin
... View more