Have anyone seen this issue?
I have a Field match alarm with Signature IDs in a watchlist which not triggering.
When I add the signature ID directly there instead of having that in a watchlist, alarm triggers as expected.
Is there any known issue?
I am on 10.1.x.