https://community.splunk.com/t5/Splunk-Search/Entering-comments-into-a-notable-event-possible/m-p/131696#M184556 <P>Hi Splunk Answers,</P> <P>I understand that notable events can be assigned severity as well as being assigned to different analysts.</P> <P>Is it possible to update an event with comments. This would be useful so the analyst working on the event can enter useful information before assigning to another analyst.</P> <P>Thanks</P> Sun, 31 May 2015 01:16:32 GMT shiftey 2015-05-31T01:16:32Z https://community.splunk.com/t5/Splunk-Search/Entering-comments-into-a-notable-event-possible/m-p/131696#M184556 <P>Hi Splunk Answers,</P> <P>I understand that notable events can be assigned severity as well as being assigned to different analysts.</P> <P>Is it possible to update an event with comments. This would be useful so the analyst working on the event can enter useful information before assigning to another analyst.</P> <P>Thanks</P> Sun, 31 May 2015 01:16:32 GMT https://community.splunk.com/t5/Splunk-Search/Entering-comments-into-a-notable-event-possible/m-p/131696#M184556 shiftey 2015-05-31T01:16:32Z https://community.splunk.com/t5/Splunk-Search/Entering-comments-into-a-notable-event-possible/m-p/131697#M184557 <P>You do this by entering by editing the event and entering only a comment. Leave the other fields empty and it not change those items (will leave the status, urgency and owner unchanged).</P> Sun, 31 May 2015 02:49:06 GMT https://community.splunk.com/t5/Splunk-Search/Entering-comments-into-a-notable-event-possible/m-p/131697#M184557 LukeMurphey 2015-05-31T02:49:06Z