Comment added to case or event

Elastic Stack Elasticsearch
1

Hello every body,

I have a question about the notes added by the user in ELK, it is possible to have the visibility of them in ONE place?

Best regards,

2

Is this in relation to the SIEM functionality?

3

Hello warkolm,

I think I am not well explained, the invistiguation at the timeline level allows us to add a note on the event. Can we consult All the notes of the events added from a centralized place at ELK level?

Best regards,

4

Ok, but it's not clear where you are saying this, because Elasticsearch doesn't have investigation timelines.

1 Like
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.