Skip to content

Commit d461b31

Browse files
[Security] Update max limit of notes (#3958)
Resolves #3931. Updates the information on the maximum supported number of notes per alert/event/Timeline, and adds applies_to tags to the `securitySolution:maxUnassociatedNotes` advanced setting, which was removed in elastic/kibana#214922. Previews: * [Set the maximum notes limit for alerts and events](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/3958/solutions/security/get-started/configure-advanced-settings#max-notes-alerts-events) * [Notes](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/3958/solutions/security/investigate/notes) 8.19 PR: TBD
1 parent 276d12d commit d461b31

File tree

2 files changed

+6
-1
lines changed

2 files changed

+6
-1
lines changed

solutions/security/get-started/configure-advanced-settings.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -223,6 +223,10 @@ The `securitySolution:alertTags` field determines which options display in the a
223223

224224

225225
## Set the maximum notes limit for alerts and events [max-notes-alerts-events]
226+
```yaml {applies_to}
227+
stack: removed 9.1
228+
serverless: removed
229+
```
226230

227231
The `securitySolution:maxUnassociatedNotes` field determines the maximum number of [notes](/solutions/security/investigate/notes.md) that you can attach to alerts and events. The maximum limit and default value is 10000.
228232

solutions/security/investigate/notes.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,8 @@ products:
1616
Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to alerts, events, and Timelines and manage them from the **Notes** page.
1717

1818
::::{note}
19-
Configure the `securitySolution:maxUnassociatedNotes` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#max-notes-alerts-events) to specify the maximum number of notes that you can attach to alerts and events.
19+
* {applies_to}`stack: ga 9.1` {applies_to}`serverless: ga` You can attach up to 100 notes to alerts and events. The number of notes you can attach to Timelines is unlimited.
20+
* {applies_to}`stack: removed 9.1` {applies_to}`serverless: removed` Configure the `securitySolution:maxUnassociatedNotes` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#max-notes-alerts-events) to specify the maximum number of notes that you can attach to alerts and events.
2021
::::
2122

2223
## Grant access to notes [notes-privileges]

0 commit comments

Comments
 (0)