Skip to content

Commit 89651a9

Browse files
Removes kib ref
1 parent f82f93b commit 89651a9

File tree

2 files changed

+9
-9
lines changed

2 files changed

+9
-9
lines changed

docs/events/add-manage-notes.asciidoc

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,22 @@
11
[[add-manage-notes]]
22
= Notes
33

4-
Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to individual alerts and events, and leave notes on saved Timelines. You can then manage notes from the **Notes** page, or from individual alerts, events, or Timelines.
4+
Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to alerts and events, and leave notes on saved Timelines. Then, use the **Notes** page to find and manage notes.
55

66
[discrete]
77
[[add-notes-documents]]
88
== Add notes to alerts and events
99

1010
. Go to the Alerts or Events tables:
1111
** **Alerts table:** Find **Alerts** in the main menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field].
12-
** **Events table:** Find **Explore** in the main menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field], then go to **Hosts**, **Users**, **Network**. Scroll down to find the Events table.
12+
** **Events table:** Find **Explore** in the main menu or by using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field], then go to **Hosts**, **Users**, **Network**. Scroll down and select the **Events** tab to view the Events table.
1313
. Click the **Add note** icon (image:images/create-note-icon.png[Add note,15,15]). The **Notes** tab in the alert or events details flyout opens.
1414
. Enter a note, then click **Add note**.
1515
+
1616
[role="screenshot"]
1717
image::images/create-new-note.png[Creating a new note]
1818

19-
Alerts and events with notes have a notification marker on the **Add note** icon (image:images/create-note-icon.png[Add note,15,15]). Hover over the icon to view the total number of notes attached to the alert or event.
19+
A notification marker displays on alerts and events with notes. Hover over the **Add note** icon (image:images/create-note-icon.png[Add note,15,15]) to see how many notes are attached to the alert or event.
2020

2121
[role="screenshot"]
2222
image::images/notes-notification.png[Notes notification marker on Alerts page]
@@ -25,7 +25,7 @@ image::images/notes-notification.png[Notes notification marker on Alerts page]
2525
[[add-notes-timelines]]
2626
== Add notes to Timelines
2727

28-
From Timeline, go to the **Notes** tab to create a new note for the entire Timeline. If you haven't saved the Timeline yet, save it, then go back to the **Notes** tab to create the note.
28+
From Timeline, go to the **Notes** tab to create a new note for the entire Timeline. If you haven't saved the Timeline yet, save it, then return to the **Notes** tab and create the note.
2929

3030
NOTE: Notes that you add to alerts or events in Timeline are automatically attached to the Timeline. Deselect the **Attach to current Timeline** option to only add the note to the alert or event.
3131

docs/serverless/investigate/add-manage-notes.mdx

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,29 +8,29 @@ tags: ["serverless","security","how-to","manage"]
88
<DocBadge template="technical preview" />
99
<div id="add-manage-notes"></div>
1010

11-
Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to individual alerts and events, and leave notes on saved Timelines. You can then manage notes from the **Notes** page, or from individual alerts, events, or Timelines.
11+
Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to alerts and events, and leave notes on saved Timelines. Then, use the **Notes** page to find and manage notes.
1212

1313
<div id="add-notes-documents"></div>
1414

1515
## Add notes to alerts and events
1616

1717
1. Go to the Alerts or Events tables:
18-
* **Alerts table:** Find **Alerts** in the main menu or by using the [global search field](((kibana-ref))/introduction.html#kibana-navigation-search).
19-
* **Events table:** Find **Explore** in the main menu or by using the [global search field](((kibana-ref))/introduction.html#kibana-navigation-search), then go to **Hosts**, **Users**, **Network**. Scroll down to find the Events table.
18+
* **Alerts table:** Click **Alerts** in the main menu.
19+
* **Events table:** Find **Explore** in the main menu, then go to **Hosts**, **Users**, **Network**. Scroll down, and select the **Events** tab to view the Events table.
2020
1. Click the **Add note** icon (<DocIcon type="editorComment" title="The icon that lets you to add a new note" />). The **Notes** tab in the alert or events details flyout opens.
2121
1. Enter a note, then click **Add note**.
2222

2323
<DocImage size="xl" url="../images/notes/-notes-create-new-note.png" alt="Creating a new note"/>
2424

25-
Alerts and events with notes have a notification marker on the **Add note** icon (<DocIcon type="editorComment" title="The icon that lets you to add a new note" />). Hover over the icon to view the total number of notes attached to the alert or event.
25+
A notification marker displays on alerts and events with notes. Hover over the **Add note** icon (<DocIcon type="editorComment" title="The icon that lets you to add a new note" />) to see how many notes are attached to the alert or event.
2626

2727
<DocImage size="xl" url="../images/notes/-notes-notification.png" alt="Notes notification marker on Alerts page"/>
2828

2929
<div id="add-notes-timelines"></div>
3030

3131
## Add notes to Timelines
3232

33-
From Timeline, go to the **Notes** tab to create a new note for the entire Timeline. If you haven't saved the Timeline yet, save it, then go back to the **Notes** tab to create the note.
33+
From Timeline, go to the **Notes** tab to create a new note for the entire Timeline. If you haven't saved the Timeline yet, save it, then return to the **Notes** tab and create the note.
3434

3535
<DocCallOut title="Note">
3636
Notes that you add to alerts or events in Timeline are automatically attached to the Timeline. Deselect the **Attach to current Timeline** option to only add the note to the alert or event.

0 commit comments

Comments
 (0)