diff --git a/docs/events/timeline-templates.asciidoc b/docs/events/timeline-templates.asciidoc index 87297623ff..f858a9e926 100644 --- a/docs/events/timeline-templates.asciidoc +++ b/docs/events/timeline-templates.asciidoc @@ -77,18 +77,18 @@ filter (refer to <>). [role="screenshot"] image::images/create-template-ui.png[Shows a new Timeline template] -. Give the template a title. -. Optionally, add a description and notes. . To add filters, click *Add field*, and then select the required option: * *Add field*: Add a regular Timeline filter. * *Add template field*: Add a template filter with a value placeholder. - ++ [role="screenshot"] image::images/create-a-timeline-filter.png[Shows an example of a Timeline filter] - ++ TIP: You can also drag and send items to the template from the *Overview*, *Hosts*, *Network*, and *Alerts* pages. ++ +. Click **Save** to give the template a title and description. *Example* diff --git a/docs/events/timeline-ui-overview.asciidoc b/docs/events/timeline-ui-overview.asciidoc index c57c8c15f8..2d9d4d41a6 100644 --- a/docs/events/timeline-ui-overview.asciidoc +++ b/docs/events/timeline-ui-overview.asciidoc @@ -12,12 +12,10 @@ by clicking *+ Add field*. [role="screenshot"] image::images/timeline-ui-updated.png[example Timeline with several events] -Timelines are responsive, and they persist as you move through the {security-app} -collecting data. Auto-saving ensures that the results of your investigation are -available for later review. To record and share your findings with others, attach your Timeline to a <>. +To avoid losing your changes, you must save the Timeline before moving to a different {security-app} page. -TIP: Untitled Timelines are saved as drafts. To attach a Timeline to a -<>, you must give it a title. +TIP: You can record and share your findings with others by attaching your Timeline to a +<>. In addition to Timelines, you can create and attach Timeline templates to <>. Timeline templates allow you to