diff --git a/docs/detections/session-view.asciidoc b/docs/detections/session-view.asciidoc index e4f6465b5f..a32f809fd3 100644 --- a/docs/detections/session-view.asciidoc +++ b/docs/detections/session-view.asciidoc @@ -17,6 +17,8 @@ and investigating session activity on your Linux infrastructure and understandin * *Nested sessions:* Sessions started by processes descended from the entry session. * *Alerts:* Alerts in the context of the processes which caused them. +NOTE: To view Linux session data from your Kubernetes infrastructure, you'll need to set up the <>. + [float] [[enable-session-view]] === Enable Session View data @@ -31,7 +33,7 @@ fields collected by {endpoint-cloud-sec} when this setting is enabled, refer to [float] [[open-session-view]] === Open Session View -Session View is accessible from the **Hosts**, **Alerts**, and **Timelines** pages. +Session View is accessible from the **Hosts**, **Alerts**, and **Timelines** pages, as well as the **Kubernetes** dashboard. Events and sessions that you can investigate in Session View have a rectangular *Open Session View* button in the *Actions* column. For example: