And I solve it.
There was a misconfiguration.
Threat intels was not enabled!!!
Just enrichment configurations was working.