Skip to main content
Sumo Logic

Add event data to a pivot (Add to Investigation)

You can add an event displayed on the Investigation tab to the current pivot as an evidence detail.

To add event data to a pivot

  1. Highlight one or more events in the Investigation tab.
    highlighted-event.png
  2. Select Add to Investigation from the Actions menu.
    actions-menu-add-to-investigation.png
  3. The Add to Investigation popup appears.
    add-to-investigation.png
  4. Enter a reason, and click Add
  5. Investigation Workflow adds the selected events to the Pivot section of the investigation history pane. Click the Details link to display it. 
    event-added-to-pivot.png