Re-vectorize all KB incidents so the agent finds them when retrieving similar past cases. Run after you add or edit KB entries. Fast (~5-15s).
Retrain the RandomForest network anomaly classifier from synthetic samples. Slower (~30-45s). Increases ML detection coverage.
Run both: RAG re-embed plus ML retrain. Total ~30-60 seconds.