> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding an Alarm to an Investigation

<Icon icon="users" iconType="solid" /> Role Availability | ❌ Read-Only ✔️ Investigator ✔️ Analyst ✔️ Manager

USM Anywhere enables you to associate alarms with an investigation.

<Warning>
  You can link up to 100 alarms to each investigation.
</Warning>

**To add an alarm to an investigation from the Alarms Details page**

1. Go to **Activity > Alarms**.

2. Locate the alarm you want to add to the investigation. See [Searching Alarms](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/alarms/searching-alarms.htm) for more information.

3. In the **Investigation** field, click the <img src="https://mintcdn.com/levelblue-5324744e/2zcwC17_yhGqZqy4/images/usm-anywhere/pencil-new.svg?fit=max&auto=format&n=2zcwC17_yhGqZqy4&q=85&s=3fe3fa0ee6ce2b44857bf81d5ab975d9" className="inline m-0" width="24" height="24" data-path="images/usm-anywhere/pencil-new.svg" /> icon to edit it and enter the title or the number that identifies the investigation.

   <Frame>
     <img src="https://mintcdn.com/levelblue-5324744e/6YRWvQYX2vFHJpyA/images/usm-anywhere/alarmdetailsinvestigations.webp?fit=max&auto=format&n=6YRWvQYX2vFHJpyA&q=85&s=90a2497a52ed2b38949fa23f5aa1f5e1" alt="" width="500" height="236" data-path="images/usm-anywhere/alarmdetailsinvestigations.webp" />
   </Frame>

   <Note>
     Click **Create New Investigation** if you want to start a new investigation. See [Creating a New Investigation](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/investigations/creating-new-investigation.htm) for more information.
   </Note>

4. Click **Apply**.

   The connection has been done and you can see it from **Investigations**. See [Evidence on Investigations](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/investigations/evidence.htm) for more information.
