From dfd16fbd109d6c9f89f14f672597cc130dd0f59b Mon Sep 17 00:00:00 2001 From: benironside Date: Wed, 10 Aug 2022 10:31:29 -0700 Subject: [PATCH 1/3] Adds links to Kubernetes dashboard topic. --- docs/detections/session-view.asciidoc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/detections/session-view.asciidoc b/docs/detections/session-view.asciidoc index e4f6465b5f..7b4fcd64a4 100644 --- a/docs/detections/session-view.asciidoc +++ b/docs/detections/session-view.asciidoc @@ -17,6 +17,8 @@ and investigating session activity on your Linux infrastructure and understandin * *Nested sessions:* Sessions started by processes descended from the entry session. * *Alerts:* Alerts in the context of the processes which caused them. +NOTE: To view Linux session data from your Kubernetes infrastructure, you'll need to set up <>. + [float] [[enable-session-view]] === Enable Session View data @@ -31,7 +33,7 @@ fields collected by {endpoint-cloud-sec} when this setting is enabled, refer to [float] [[open-session-view]] === Open Session View -Session View is accessible from the **Hosts**, **Alerts**, and **Timelines** pages. +Session View is accessible from the **Hosts**, **Alerts**, and **Timelines** pages, as well as the **Kubernetes dashboard**. Events and sessions that you can investigate in Session View have a rectangular *Open Session View* button in the *Actions* column. For example: From 7a566223ca026c9c123c05a5806a07949f4666fc Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> Date: Wed, 17 Aug 2022 14:25:39 -0400 Subject: [PATCH 2/3] Update docs/detections/session-view.asciidoc Co-authored-by: Joe Peeples --- docs/detections/session-view.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/detections/session-view.asciidoc b/docs/detections/session-view.asciidoc index 7b4fcd64a4..bf09f9ad6d 100644 --- a/docs/detections/session-view.asciidoc +++ b/docs/detections/session-view.asciidoc @@ -33,7 +33,7 @@ fields collected by {endpoint-cloud-sec} when this setting is enabled, refer to [float] [[open-session-view]] === Open Session View -Session View is accessible from the **Hosts**, **Alerts**, and **Timelines** pages, as well as the **Kubernetes dashboard**. +Session View is accessible from the **Hosts**, **Alerts**, and **Timelines** pages, as well as the **Kubernetes** dashboard. Events and sessions that you can investigate in Session View have a rectangular *Open Session View* button in the *Actions* column. For example: From 327bda9dc5dbe626b7efb9737fedd756304f216b Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein <91905639+benironside@users.noreply.github.com> Date: Wed, 17 Aug 2022 14:25:45 -0400 Subject: [PATCH 3/3] Update docs/detections/session-view.asciidoc Co-authored-by: Joe Peeples --- docs/detections/session-view.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/detections/session-view.asciidoc b/docs/detections/session-view.asciidoc index bf09f9ad6d..a32f809fd3 100644 --- a/docs/detections/session-view.asciidoc +++ b/docs/detections/session-view.asciidoc @@ -17,7 +17,7 @@ and investigating session activity on your Linux infrastructure and understandin * *Nested sessions:* Sessions started by processes descended from the entry session. * *Alerts:* Alerts in the context of the processes which caused them. -NOTE: To view Linux session data from your Kubernetes infrastructure, you'll need to set up <>. +NOTE: To view Linux session data from your Kubernetes infrastructure, you'll need to set up the <>. [float] [[enable-session-view]]