> ## Documentation Index
> Fetch the complete documentation index at: https://levelblue-final.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding an Alarm to an Investigation

 Role Availability | ❌ Read-Only ✔️ Investigator ✔️ Analyst ✔️ Manager

USM Anywhere enables you to associate alarms with an investigation.

> [!WARNING]
>
> You can link up to 100 alarms to each investigation.

**To add an alarm to an investigation from the Alarms Details page**

1. Go to **Activity > Alarms**.

2. Locate the alarm you want to add to the investigation. See [Searching Alarms](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/alarms/searching-alarms.htm) for more information.

3. In the **Investigation** field, click the ![](https://mintcdn.com/levelblue-final/SPmy2LqqTlJThUf-/images/usm-anywhere/pencil-new.svg?fit=max\&auto=format\&n=SPmy2LqqTlJThUf-\&q=85\&s=165bba93fb785be56053c468fb2a06fa) icon to edit it and enter the title or the number that identifies the investigation.

   ![](https://mintcdn.com/levelblue-final/9vLvYGhvY8F53Na7/images/usm-anywhere/alarmdetailsinvestigations.webp?fit=max\&auto=format\&n=9vLvYGhvY8F53Na7\&q=85\&s=da46cc0e59726e0032935091756f1f9d)

   > [!NOTE]
   >
   > Click **Create New Investigation** if you want to start a new investigation. See [Creating a New Investigation](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/investigations/creating-new-investigation.htm) for more information.

4. Click **Apply**.

   The connection has been done and you can see it from **Investigations**. See [Evidence on Investigations](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/investigations/evidence.htm) for more information.