[ESS][8.13] Doc filters that change the event analyzer data view and …

…time range (#4894) * First draft * Minor wording edits
elastic · Mar 12, 2024 · 37ed495 · 37ed495
1 parent cdf7f90
commit 37ed495
Show file tree

Hide file tree

Showing 12 changed files with 10 additions and 0 deletions.
diff --git a/docs/detections/images/alert-pill.png b/docs/detections/images/alert-pill.png
diff --git a/docs/detections/images/data-view-selection.png b/docs/detections/images/data-view-selection.png
diff --git a/docs/detections/images/date-range-selection.png b/docs/detections/images/date-range-selection.png
diff --git a/docs/detections/images/event-details.png b/docs/detections/images/event-details.png
diff --git a/docs/detections/images/event-type.png b/docs/detections/images/event-type.png
diff --git a/docs/detections/images/full-screen-analyzer.png b/docs/detections/images/full-screen-analyzer.png
diff --git a/docs/detections/images/graphical-view.png b/docs/detections/images/graphical-view.png
diff --git a/docs/detections/images/node-legend.png b/docs/detections/images/node-legend.png
diff --git a/docs/detections/images/process-details.png b/docs/detections/images/process-details.png
diff --git a/docs/detections/images/process-list.png b/docs/detections/images/process-list.png
diff --git a/docs/detections/images/process-schema.png b/docs/detections/images/process-schema.png
diff --git a/docs/detections/visual-event-analyzer.asciidoc b/docs/detections/visual-event-analyzer.asciidoc
@@ -65,6 +65,16 @@ Click the **Legend** to show the state of each process node.
 [role="screenshot"]
 image::images/node-legend.png[]
 
+Use the date and time filter to analyze the event within a specific time range. By default, the selected time range matches that of the table from which you opened the alert. 
+
+[role="screenshot"]
+image::images/date-range-selection.png[]
+
+Select a different data view to further filter the alert's related events.
+
+[role="screenshot"]
+image::images/data-view-selection.png[]
+
 To expand the analyzer to a full screen, select the **Full Screen** icon above the left panel.
 
 [role="screenshot"]