diff --git a/docs/detections/alerts-view-details.asciidoc b/docs/detections/alerts-view-details.asciidoc index 0e668acfcd..7387068dfe 100644 --- a/docs/detections/alerts-view-details.asciidoc +++ b/docs/detections/alerts-view-details.asciidoc @@ -44,7 +44,7 @@ IMPORTANT: If you've enabled grouping on the Alerts page, the alert details flyo ** Alert status and when the alert was created ** Alert severity and risk score (these are inherited from rule that generated the alert) ** Users assigned to the alert (click the **Assign alert** image:images/assign-alert.png[Assign alert,15,15] icon to assign more users) -** Notes attached to the alert (click the **Add note** image:images/add-note.png[Add note,15,15] icon to create a new note) +** Notes attached to the alert (click the **Add note** image:images/add-note-icon.png[Add note,15,15] icon to create a new note) * Click the **Table** or **JSON** tabs to display the alert details in table or JSON format. In table format, alert details are displayed as field-value pairs. diff --git a/docs/events/add-manage-notes.asciidoc b/docs/events/add-manage-notes.asciidoc index 22e15caf6d..0b5bc24fb4 100644 --- a/docs/events/add-manage-notes.asciidoc +++ b/docs/events/add-manage-notes.asciidoc @@ -46,7 +46,7 @@ From the Notes table, you can: * Search for specific notes or filter them by: ** The user who created the notes ** The type of object that notes are attached to (notes can be attached to alerts, events, Timelines, or nothing) -* Examine the contents of a note by clicking on the text in the **Note content** column +* Examine the contents of a note (select the text in the **Note content** column) * Delete individual or multiple notes * Examine the alert or event that a note is attached to * Open the note in Timeline (this option is only available for alerts or events with notes attached to a saved Timeline) diff --git a/docs/serverless/investigate/add-manage-notes.mdx b/docs/serverless/investigate/add-manage-notes.mdx index f9a709a50d..84117b5c3c 100644 --- a/docs/serverless/investigate/add-manage-notes.mdx +++ b/docs/serverless/investigate/add-manage-notes.mdx @@ -48,7 +48,7 @@ From the Notes table, you can: * Search for specific notes or filter them by: * The user who created the notes * The type of object that notes are attached to (notes can be attached to alerts, events, Timelines, or nothing) -* Examine the contents of a note by clicking on the text in the **Note content** column +* Examine the contents of a note (select the text in the **Note content** column) * Delete individual or multiple notes * Examine the alert or event that a note is attached to * Open the note in Timeline (this option is only available for alerts or events with notes attached to a saved Timeline) @@ -56,6 +56,3 @@ From the Notes table, you can: You can manage notes for individual alerts, events, and Timelines from the **Notes** tab in the details flyout or Timeline. - - -