Skip to content

Commit

Permalink
[8.12] Timeline autosave removed in favor of manual save (backport #4299
Browse files Browse the repository at this point in the history
) (#4436)

Co-authored-by: Benjamin Ironside Goldstein <[email protected]>
Co-authored-by: Nastasha Solomon <[email protected]>
  • Loading branch information
3 people authored Dec 12, 2023
1 parent c7db158 commit a219ed1
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 9 deletions.
8 changes: 4 additions & 4 deletions docs/events/timeline-templates.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -77,18 +77,18 @@ filter (refer to <<pivot>>).
[role="screenshot"]
image::images/create-template-ui.png[Shows a new Timeline template]

. Give the template a title.
. Optionally, add a description and notes.
. To add filters, click *Add field*, and then select the required option:

* *Add field*: Add a regular Timeline filter.
* *Add template field*: Add a template filter with a value placeholder.

+
[role="screenshot"]
image::images/create-a-timeline-filter.png[Shows an example of a Timeline filter]

+
TIP: You can also drag and send items to the template from the *Overview*,
*Hosts*, *Network*, and *Alerts* pages.
+
. Click **Save** to give the template a title and description.

*Example*

Expand Down
8 changes: 3 additions & 5 deletions docs/events/timeline-ui-overview.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -12,12 +12,10 @@ by clicking *+ Add field*.
[role="screenshot"]
image::images/timeline-ui-updated.png[example Timeline with several events]

Timelines are responsive, and they persist as you move through the {security-app}
collecting data. Auto-saving ensures that the results of your investigation are
available for later review. To record and share your findings with others, attach your Timeline to a <<cases-overview, case>>.
To avoid losing your changes, you must save the Timeline before moving to a different {security-app} page.

TIP: Untitled Timelines are saved as drafts. To attach a Timeline to a
<<cases-overview, case>>, you must give it a title.
TIP: You can record and share your findings with others by attaching your Timeline to a
<<cases-overview, case>>.

In addition to Timelines, you can create and attach Timeline templates to
<<detection-engine-overview, detection rules>>. Timeline templates allow you to
Expand Down

0 comments on commit a219ed1

Please sign in to comment.