diff --git a/docs/detections/alerts-view-details.asciidoc b/docs/detections/alerts-view-details.asciidoc index 6ab2cad433..dabc2bb727 100644 --- a/docs/detections/alerts-view-details.asciidoc +++ b/docs/detections/alerts-view-details.asciidoc @@ -132,14 +132,6 @@ Click **Visualizations** to display the following previews: [[expanded-visualizations-view]] === Expanded visualizations view -preview::[] - -.Requirements -[sidebar] --- -To use the **Visualize** tab, you must turn on the `securitySolution:enableVisualizationsInFlyout` <>. --- - The **Visualize** tab allows you to maintain the context of the Alerts table, while providing a more detailed view of alerts that you're investigating in the event analyzer or Session View. To open the tab, click **Session viewer preview** or **Analyzer preview** from the right panel. [role="screenshot"] diff --git a/docs/detections/visual-event-analyzer.asciidoc b/docs/detections/visual-event-analyzer.asciidoc index 22fff8304f..a21075af1e 100644 --- a/docs/detections/visual-event-analyzer.asciidoc +++ b/docs/detections/visual-event-analyzer.asciidoc @@ -30,8 +30,6 @@ Or ** `agent.type:"winlogbeat" and event.module: "sysmon" and process.entity_id : *` . Events that can be visually analyzed are denoted by a cubical **Analyze event** icon. Select this option to open the event in the visual analyzer. The event analyzer is accessible from the **Hosts**, **Alerts**, and **Timelines** pages, as well as the alert details flyout. -+ -TIP: Turn on the `securitySolution:enableVisualizationsInFlyout` <> to access the event analyzer from the **Visualize** tab in the alert or event details flyout. + [role="screenshot"] diff --git a/docs/getting-started/advanced-setting.asciidoc b/docs/getting-started/advanced-setting.asciidoc index 05c000d946..6782d7b050 100644 --- a/docs/getting-started/advanced-setting.asciidoc +++ b/docs/getting-started/advanced-setting.asciidoc @@ -112,9 +112,7 @@ Including data from cold and frozen {ref}/data-tiers.html[data tiers] in <> on the alert or event details flyout. This setting is turned off by default. +The `securitySolution:enableVisualizationsInFlyout` setting allows you to access the event analyzer and Session View in the **Visualize** <> on the alert or event details flyout. [discrete] == Change the default search interval and data refresh time