Skip to content

Commit e000d2d

Browse files
Removed unnecessary ref
1 parent 9387e8e commit e000d2d

File tree

2 files changed

+23
-18
lines changed

2 files changed

+23
-18
lines changed

docs/events/add-manage-notes.asciidoc

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@
33

44
Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to alerts, events, and Timeline and manage them from the **Notes** page.
55

6+
NOTE: Configure the `securitySolution:maxUnassociatedNotes` <<max-notes-alerts-event,advanced setting>> to specify the maximum number of notes that you can attach to alerts and events.
7+
68
[discrete]
79
[[add-notes-documents]]
810
== Add notes to alerts and events
@@ -16,30 +18,31 @@ Incorporate notes into your investigative workflows to coordinate responses, con
1618
[role="screenshot"]
1719
image::images/create-new-note.png[Creating a new note]
1820

19-
A notification dot displays on alerts and events with notes. Hover over the **Add note** icon (image:images/create-note-icon.png[Add note,15,15]) to see how many notes are attached to the alert or event.
21+
In the Alerts or Events tables, a notification dot displays on alerts and events with notes. Hover over the **Add note** icon (image:images/create-note-icon.png[Add note,15,15]) to see how many notes are attached to the alert or event.
2022

2123
[role="screenshot"]
2224
image::images/notes-notification.png[Notes notification marker on Alerts page]
2325

24-
NOTE: Configure the `securitySolution:maxUnassociatedNotes` <<max-notes-alerts-event,advanced setting>> to specify the maximum number of <<add-manage-notes,notes>> that you can attach to alerts and events.
25-
2626
[discrete]
2727
[[add-notes-timelines]]
2828
== Add notes to Timelines
2929

30-
There are two ways to add notes to an open Timeline: the **Notes** Timeline tab or the details flyout for alerts and events that you're investigating in Timeline. Also note that you can only add notes to saved Timelines.
30+
IMPORTANT: You can only add notes to saved Timelines.
31+
32+
There are two ways to add notes to an open Timeline: the **Notes** Timeline tab or the details flyout for alerts and events that you're investigating in Timeline.
3133

3234
From the **Notes** Timeline tab, you can create a new note that's attached to the entire Timeline. From the details flyout, any notes that you add to alerts and events are automatically attached to the Timeline you're currently working on. If you only want to create a note for the alert or event, deselect the **Attach to current Timeline** option.
3335

3436
[discrete]
3537
[[manage-notes]]
3638
== Find and manage notes
3739

38-
//Security solution view nav: Investigations -> Notes
39-
//Classic nav view: Manage -> Investigations -> Notes
40+
//Will need to revisit the navigation instructions below. The nav path to the Notes page differs between the Classic nav view (Manage -> Investigations -> Notes) and the Security solution view (Investigations -> Notes)
4041

4142
The **Notes** page allows you to view and interact with all existing notes. To access the page, find **Investigations** in the main menu or look for “Investigations” using the {kibana-ref}/introduction.html#kibana-navigation-search[global search field], then go to **Notes**.
4243

44+
TIP: You can also manage notes for alerts, events, and Timelines from the **Notes** <<expanded-notes-view,tab>> in the details flyout or in Timeline.
45+
4346
[role="screenshot"]
4447
image::images/notes-management-page.png[Notes management page]
4548

@@ -52,5 +55,3 @@ From the Notes table, you can:
5255
* Delete individual or multiple notes
5356
* Examine the alert or event that a note is attached to
5457
* Open the note in Timeline (this option is only available for alerts or events with notes attached to a saved Timeline)
55-
56-
TIP: You can also manage notes for individual alerts, events, and Timelines from the **Notes** tab in the details flyout or Timeline.

docs/serverless/investigate/add-manage-notes.mdx

Lines changed: 14 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,10 @@ tags: ["serverless","security","how-to","manage"]
1010

1111
Incorporate notes into your investigative workflows to coordinate responses, conduct threat hunting, and share investigative findings. You can attach notes to alerts, events, and Timeline and manage them from the **Notes** page.
1212

13+
<DocCallOut title="Note">
14+
Configure the `securitySolution:maxUnassociatedNotes` <DocLink slug="/serverless/security/advanced-settings" section="max-notes-alerts-events">advanced settings</DocLink> to specify the maximum number of notes that you can attach to alerts and events.
15+
</DocCallOut>
16+
1317
<div id="add-notes-documents"></div>
1418

1519
## Add notes to alerts and events
@@ -22,19 +26,19 @@ Incorporate notes into your investigative workflows to coordinate responses, con
2226

2327
<DocImage size="xl" url="../images/notes/-notes-create-new-note.png" alt="Creating a new note"/>
2428

25-
A notification dot displays on alerts and events with notes. Hover over the **Add note** icon (<DocIcon type="editorComment" title="The icon that lets you to add a new note" />) to see how many notes are attached to the alert or event.
29+
In the Alerts or Events tables, a notification dot displays on alerts and events with notes. Hover over the **Add note** icon (<DocIcon type="editorComment" title="The icon that lets you to add a new note" />) to see how many notes are attached to the alert or event.
2630

2731
<DocImage size="xl" url="../images/notes/-notes-notification.png" alt="Notes notification marker on Alerts page"/>
2832

29-
<DocCallOut title="Note">
30-
Configure the `securitySolution:maxUnassociatedNotes` <DocLink slug="/serverless/security/advanced-settings" section="max-notes-alerts-events">advanced settings</DocLink> to specify the maximum number of notes that you can attach to alerts and events.
31-
</DocCallOut>
32-
3333
<div id="add-notes-timelines"></div>
3434

3535
## Add notes to Timelines
3636

37-
There are two ways to add notes to an open Timeline: the **Notes** Timeline tab or the details flyout for alerts and events that you're investigating in Timeline. Also note that you can only add notes to saved Timelines.
37+
<DocCallOut title="Important" color="warning">
38+
You can only add notes to saved Timelines.
39+
</DocCallOut>
40+
41+
There are two ways to add notes to an open Timeline: the **Notes** Timeline tab or the details flyout for alerts and events that you're investigating in Timeline.
3842

3943
From the **Notes** Timeline tab, you can create a new note that's attached to the entire Timeline. From the details flyout, any notes that you add to alerts and events are automatically attached to the Timeline you're currently working on. If you only want to create a note for the alert or event, deselect the **Attach to current Timeline** option.
4044

@@ -44,6 +48,10 @@ From the **Notes** Timeline tab, you can create a new note that's attached to th
4448

4549
The **Notes** page allows you to view and interact with all existing notes. To access the page, find **Investigations** in the main menu, then go to **Notes**.
4650

51+
<DocCallOut title="Tip">
52+
You can manage notes for alerts, events, and Timelines from the **Notes** <DocLink slug="/serverless/security/view-alert-details" section="expanded-notes-view">tab</DocLink> in the details flyout or in Timeline.
53+
</DocCallOut>
54+
4755
<DocImage size="xl" url="../images/notes/-notes-management-page.png" alt="Notes management page"/>
4856

4957
From the Notes table, you can:
@@ -54,7 +62,3 @@ From the Notes table, you can:
5462
* Delete individual or multiple notes
5563
* Examine the alert or event that a note is attached to
5664
* Open the note in Timeline (this option is only available for alerts or events with notes attached to a saved Timeline)
57-
58-
<DocCallOut title="Tip">
59-
You can manage notes for individual alerts, events, and Timelines from the **Notes** tab in the details flyout or Timeline.
60-
</DocCallOut>

0 commit comments

Comments
 (0)