In some cases to differentiate events that are attached to an alert analysts have to document some information for each event separately (i.e. each event having different permissions). But in the current version (8.2.1 as of now) they only have the possibility to make one comment in an alert.

Comments