[8.13] [ESS][8.13] Doc filters that change the event analyzer data vi…

…ew and time range (backport #4894) (#4912) * First draft * Minor wording edits (cherry picked from commit 37ed495) Co-authored-by: Nastasha Solomon <[email protected]>
elastic · Mar 18, 2024 · 4b94037 · 4b94037
1 parent 21d8983
commit 4b94037
Show file tree

Hide file tree

Showing 12 changed files with 10 additions and 0 deletions.
diff --git a/docs/detections/images/alert-pill.png b/docs/detections/images/alert-pill.png
diff --git a/docs/detections/images/data-view-selection.png b/docs/detections/images/data-view-selection.png
diff --git a/docs/detections/images/date-range-selection.png b/docs/detections/images/date-range-selection.png
diff --git a/docs/detections/images/event-details.png b/docs/detections/images/event-details.png
diff --git a/docs/detections/images/event-type.png b/docs/detections/images/event-type.png
diff --git a/docs/detections/images/full-screen-analyzer.png b/docs/detections/images/full-screen-analyzer.png
diff --git a/docs/detections/images/graphical-view.png b/docs/detections/images/graphical-view.png
diff --git a/docs/detections/images/node-legend.png b/docs/detections/images/node-legend.png
diff --git a/docs/detections/images/process-details.png b/docs/detections/images/process-details.png
diff --git a/docs/detections/images/process-list.png b/docs/detections/images/process-list.png
diff --git a/docs/detections/images/process-schema.png b/docs/detections/images/process-schema.png
diff --git a/docs/detections/visual-event-analyzer.asciidoc b/docs/detections/visual-event-analyzer.asciidoc
@@ -65,6 +65,16 @@ Click the **Legend** to show the state of each process node.
 [role="screenshot"]
 image::images/node-legend.png[]
 
+Use the date and time filter to analyze the event within a specific time range. By default, the selected time range matches that of the table from which you opened the alert. 
+
+[role="screenshot"]
+image::images/date-range-selection.png[]
+
+Select a different data view to further filter the alert's related events.
+
+[role="screenshot"]
+image::images/data-view-selection.png[]
+
 To expand the analyzer to a full screen, select the **Full Screen** icon above the left panel.
 
 [role="screenshot"]