diff --git a/explore-analyze/alerts-cases/watcher/action-foreach.md b/explore-analyze/alerts-cases/watcher/action-foreach.md
index f87463ef06..309d1ecb62 100644
--- a/explore-analyze/alerts-cases/watcher/action-foreach.md
+++ b/explore-analyze/alerts-cases/watcher/action-foreach.md
@@ -45,3 +45,7 @@ PUT _watcher/watch/log_event_watch
 ```
 
 1. The logging statement will be executed for each of the returned search hits.
+
+::::{note}
+If you are running a [`script`](transform-script.md) {{watcher-transform}}, the transform needs to be included prior to the `actions` section to ensure the output is available to the `foreach` loop.
+::::