if you want to know, why an alert triggert, there is a "Matched Signature" part in the "Alert Details" window for most alerts. E.g.:
This is the signature that matched for this specific alert. The total amount of signatures can be found in the Attack details in you IPS policy in the "Sig. Desc.":
Hope this helped.