I have an enrichment rule that updates the last access time from a shell CI to a last_discovered_time(custom) on a node CI if the last access (shell) != last_discovered_time(node).
When the enrichment is first activated the enrichment runs and updates the last_discovered_time as expected. However it does not seem to properly recalculate or update subsequently. So for example if I manually update the last access on the shell (by doing an update), the query results does change and returns the correct results but the update does not occur.Seem like ther is an issue with the tql recalculation and the results when there is an update on the query.
I am using version 10.10 cup2.