From e3e6f8a407593acea8f26fb23d9c67c462595fb7 Mon Sep 17 00:00:00 2001 From: nastasha-solomon <79124755+nastasha-solomon@users.noreply.github.com> Date: Tue, 23 Aug 2022 20:26:43 -0400 Subject: [PATCH] [BUG] Minor doc bugs in event analyzer topic (#2360) (cherry picked from commit c05bc4b0b879605285353b52438a802f27da2c5f) --- docs/detections/alerts-view-details.asciidoc | 3 ++- docs/detections/visual-event-analyzer.asciidoc | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/detections/alerts-view-details.asciidoc b/docs/detections/alerts-view-details.asciidoc index e09e870735..fe03e44fe3 100644 --- a/docs/detections/alerts-view-details.asciidoc +++ b/docs/detections/alerts-view-details.asciidoc @@ -68,7 +68,8 @@ NOTE: This feature requires a https://www.elastic.co/pricing[Platinum or Enterpr + beta::[] + -NOTE: This feature requires a https://www.elastic.co/pricing[Platinum or Enterprise subscription]. In addition, to display it within the Insights section, you must also add the following feature flag to the `kibana.yml` file: `xpack.securitySolution.enableExperimental: ['insightsRelatedAlertsByProcessAncestry']`. +NOTE: This feature requires a https://www.elastic.co/pricing[Platinum or Enterprise subscription]. In addition, to display it within the Insights section, you must also add the following feature flag to the `kibana.yml` file: +`xpack.securitySolution.enableExperimental: ['insightsRelatedAlertsByProcessAncestry']` [discrete] [[enriched-data-overview]] diff --git a/docs/detections/visual-event-analyzer.asciidoc b/docs/detections/visual-event-analyzer.asciidoc index 44079c5771..86ee7a7503 100644 --- a/docs/detections/visual-event-analyzer.asciidoc +++ b/docs/detections/visual-event-analyzer.asciidoc @@ -123,7 +123,8 @@ In the example screenshot below, five alerts were generated by the analyzed even preview::[] -NOTE: This is a https://www.elastic.co/pricing[Platinum or Enterprise subscription] feature. In addition, to display it in {elastic-security} you must add the `xpack.securitySolution.enableExperimental: ['insightsRelatedAlertsByProcessAncestry']` feature flag to the `kibana.yml` file. +NOTE: Displaying alerts in the process tree is a https://www.elastic.co/pricing[Platinum or Enterprise subscription] feature. In addition, to display it in {elastic-sec} you must add the following feature flag to the `kibana.yml` file: +`xpack.securitySolution.enableExperimental: ['insightsRelatedAlertsByProcessAncestry']` [role="screenshot"] image::images/alert-pill.png[]