Skip to content

Commit 9387e8e

Browse files
Adds ref to adv setting
1 parent 9382d5f commit 9387e8e

File tree

2 files changed

+12
-8
lines changed

2 files changed

+12
-8
lines changed

docs/events/add-manage-notes.asciidoc

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,18 +16,20 @@ Incorporate notes into your investigative workflows to coordinate responses, con
1616
[role="screenshot"]
1717
image::images/create-new-note.png[Creating a new note]
1818

19-
A notification marker displays on alerts and events with notes. Hover over the **Add note** icon (image:images/create-note-icon.png[Add note,15,15]) to see how many notes are attached to the alert or event.
19+
A notification dot displays on alerts and events with notes. Hover over the **Add note** icon (image:images/create-note-icon.png[Add note,15,15]) to see how many notes are attached to the alert or event.
2020

2121
[role="screenshot"]
2222
image::images/notes-notification.png[Notes notification marker on Alerts page]
2323

24+
NOTE: Configure the `securitySolution:maxUnassociatedNotes` <<max-notes-alerts-event,advanced setting>> to specify the maximum number of <<add-manage-notes,notes>> that you can attach to alerts and events.
25+
2426
[discrete]
2527
[[add-notes-timelines]]
2628
== Add notes to Timelines
2729

28-
From Timeline, go to the **Notes** tab to create a new note for the entire Timeline. If you haven't saved the Timeline yet, save it, then return to the **Notes** tab and create the note.
30+
There are two ways to add notes to an open Timeline: the **Notes** Timeline tab or the details flyout for alerts and events that you're investigating in Timeline. Also note that you can only add notes to saved Timelines.
2931

30-
NOTE: Notes that you add to alerts or events in Timeline are automatically attached to the Timeline. Deselect the **Attach to current Timeline** option to only add the note to the alert or event.
32+
From the **Notes** Timeline tab, you can create a new note that's attached to the entire Timeline. From the details flyout, any notes that you add to alerts and events are automatically attached to the Timeline you're currently working on. If you only want to create a note for the alert or event, deselect the **Attach to current Timeline** option.
3133

3234
[discrete]
3335
[[manage-notes]]

docs/serverless/investigate/add-manage-notes.mdx

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,19 +22,21 @@ Incorporate notes into your investigative workflows to coordinate responses, con
2222

2323
<DocImage size="xl" url="../images/notes/-notes-create-new-note.png" alt="Creating a new note"/>
2424

25-
A notification marker displays on alerts and events with notes. Hover over the **Add note** icon (<DocIcon type="editorComment" title="The icon that lets you to add a new note" />) to see how many notes are attached to the alert or event.
25+
A notification dot displays on alerts and events with notes. Hover over the **Add note** icon (<DocIcon type="editorComment" title="The icon that lets you to add a new note" />) to see how many notes are attached to the alert or event.
2626

2727
<DocImage size="xl" url="../images/notes/-notes-notification.png" alt="Notes notification marker on Alerts page"/>
2828

29+
<DocCallOut title="Note">
30+
Configure the `securitySolution:maxUnassociatedNotes` <DocLink slug="/serverless/security/advanced-settings" section="max-notes-alerts-events">advanced settings</DocLink> to specify the maximum number of notes that you can attach to alerts and events.
31+
</DocCallOut>
32+
2933
<div id="add-notes-timelines"></div>
3034

3135
## Add notes to Timelines
3236

33-
From Timeline, go to the **Notes** tab to create a new note for the entire Timeline. If you haven't saved the Timeline yet, save it, then return to the **Notes** tab and create the note.
37+
There are two ways to add notes to an open Timeline: the **Notes** Timeline tab or the details flyout for alerts and events that you're investigating in Timeline. Also note that you can only add notes to saved Timelines.
3438

35-
<DocCallOut title="Note">
36-
Notes that you add to alerts or events in Timeline are automatically attached to the Timeline. Deselect the **Attach to current Timeline** option to only add the note to the alert or event.
37-
</DocCallOut>
39+
From the **Notes** Timeline tab, you can create a new note that's attached to the entire Timeline. From the details flyout, any notes that you add to alerts and events are automatically attached to the Timeline you're currently working on. If you only want to create a note for the alert or event, deselect the **Attach to current Timeline** option.
3840

3941
<div id="manage-notes"></div>
4042

0 commit comments

Comments
 (0)