Skip to main content
Sumo Logic

Add event data to a pivot (Add to Investigation)

You can add an event displayed on the Investigation tab to the current pivot as an evidence detail.

To add event data to a pivot

  1. Highlight one or more events in the Investigation tab.
  2. Select Add to Investigation from the Actions menu.
  3. The Add to Investigation popup appears.
  4. Enter a reason, and click Add
  5. Investigation Workflow adds the selected events to the Pivot section of the investigation history pane. Click the Details link to display it.