Perform the following procedure to add events to an investigation.

Procedure

  1. On the navigation bar, click Process Search.
  2. Select a process from the Process Search page (see Overview of Process Search) and open the Process Analysis page (see Process Analysis Page).
  3. Scroll to the list of events. Click the Tag icon in an event row and select an investigation.
    The tag icon on the Process Search page