diff --git a/solutions/security/get-started/configure-advanced-settings.md b/solutions/security/get-started/configure-advanced-settings.md index 70f4c428cb..d3c4dc650e 100644 --- a/solutions/security/get-started/configure-advanced-settings.md +++ b/solutions/security/get-started/configure-advanced-settings.md @@ -223,6 +223,10 @@ The `securitySolution:alertTags` field determines which options display in the a ## Set the maximum notes limit for alerts and events [max-notes-alerts-events] +```yaml {applies_to} +stack: removed 9.1 +serverless: removed +``` The `securitySolution:maxUnassociatedNotes` field determines the maximum number of [notes](/solutions/security/investigate/notes.md) that you can attach to alerts and events. The maximum limit and default value is 10000. diff --git a/solutions/security/investigate/notes.md b/solutions/security/investigate/notes.md index 66f3a12786..d15979707a 100644 --- a/solutions/security/investigate/notes.md +++ b/solutions/security/investigate/notes.md @@ -16,7 +16,8 @@ products: Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to alerts, events, and Timelines and manage them from the **Notes** page. ::::{note} -Configure the `securitySolution:maxUnassociatedNotes` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#max-notes-alerts-events) to specify the maximum number of notes that you can attach to alerts and events. +* {applies_to}`stack: ga 9.1` {applies_to}`serverless: ga` You can attach up to 100 notes to alerts and events. The number of notes you can attach to Timelines is unlimited. +* {applies_to}`stack: removed 9.1` {applies_to}`serverless: removed` Configure the `securitySolution:maxUnassociatedNotes` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#max-notes-alerts-events) to specify the maximum number of notes that you can attach to alerts and events. :::: ## Grant access to notes [notes-privileges]