diff --git a/docs/en/observability/images/hosts.png b/docs/en/observability/images/hosts.png
index 5765e90ebc..4e42610e4c 100644
Binary files a/docs/en/observability/images/hosts.png and b/docs/en/observability/images/hosts.png differ
diff --git a/docs/en/observability/monitor-infra/analyze-hosts.asciidoc b/docs/en/observability/monitor-infra/analyze-hosts.asciidoc
index 8f983acbaa..d9ec1e154d 100644
--- a/docs/en/observability/monitor-infra/analyze-hosts.asciidoc
+++ b/docs/en/observability/monitor-infra/analyze-hosts.asciidoc
@@ -59,9 +59,18 @@ Otherwise you’ll see metrics for all your monitored hosts (up to the number of
 hosts specified by the host limit).
 * Select additional criteria to filter the view:
 ** In the **Operating System** list, select one or more operating systems
-and include (or exclude) metrics for those hosts.
+to include (or exclude) metrics for hosts running the selected operating systems.
 ** In the **Cloud Provider** list, select one or more cloud providers to
-include (or exclude) metrics for the selected cloud providers.
+include (or exclude) metrics for hosts running on the selected cloud providers.
+** In the **Service Name** list, select one or more service names to
+include (or exclude) metrics for the hosts running the selected services.
+Services must be instrumented by APM to be filterable.
+This filter is useful for comparing different hosts to determine whether a problem lies
+with a service or the host that it is running on.
+
+TIP: Filtered results are sorted by _document count_.
+Document count is the number of events received by Elastic for the hosts that match your filter criteria.
+
 * Change the date range in the time filter, or click and drag on a
 visualization to change the date range.
 * Within a visualization, click a point on a line and apply filters to set other