Skip to content

Commit b41f161

Browse files
Merge branch 'main' into issue-333-case-assignees
2 parents 1ef5032 + 32faddb commit b41f161

File tree

2 files changed

+6
-0
lines changed

2 files changed

+6
-0
lines changed

solutions/security/investigate/notes.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,9 @@ Incorporate notes into your investigative workflows to coordinate responses, con
1616
Configure the `securitySolution:maxUnassociatedNotes` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#max-notes-alerts-events) to specify the maximum number of notes that you can attach to alerts and events.
1717
::::
1818

19+
## Grant access to notes [notes-privileges]
1920

21+
You can control access to notes by setting the [{{kib}} privileges](../../../deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md) for the **Notes** feature under **Security**.
2022

2123
## View and add notes to alerts and events [notes-alerts-events]
2224

solutions/security/investigate/timeline.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,10 @@ You can drag or send fields of interest to a Timeline to create the desired quer
2222
In addition to Timelines, you can create and attach Timeline templates to [detection rules](/solutions/security/detect-and-alert.md). Timeline templates allow you to define the source event fields used when you investigate alerts in Timeline. You can select whether the fields use predefined values or values retrieved from the alert. For more information, refer to [Timeline templates](/solutions/security/investigate/timeline-templates.md).
2323

2424

25+
## Grant access to Timeline [timeline-privileges]
26+
27+
You can control access to Timeline by setting the [{{kib}} privileges](../../../deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md) for the **Timeline** feature under **Security**.
28+
2529
## Create new or open existing Timeline [open-create-timeline]
2630

2731
To make a new Timeline, choose one of the following:

0 commit comments

Comments
 (0)