Splunk® Phantom

Use Splunk Phantom

Acrobat logo Download manual as PDF

This documentation does not apply to the most recent version of Phantom. Click here for the latest version.
Acrobat logo Download topic as PDF

View and create notes in Splunk Phantom

You can create a note in Splunk Phantom when working with tasks, artifacts, or cases. Use the Notes tab to view all of the notes, regardless of the user who created them. For example, perform the following tasks to view all notes for a container or case:

  1. Navigate to a container or case in Splunk Phantom.
  2. Click the Notes tab.

You can create a general note by clicking + Note.

You can filter the notes being shown by doing the following:

  • In the Show field, select Task Notes, General Notes, or Artifact Notes from the drop-down list. By default, all notes are displayed.
  • In the Phase field, select a workbook phase from the drop-down list.

Users who upgrade from releases of Splunk Phantom earlier than version 4.5 need to re-index containers before notes are searchable. Use the Search Settings page to re-index.

Last modified on 09 April, 2020
View recommendations for mission experts, playbooks, and actions
Search within Splunk Phantom

This documentation applies to the following versions of Splunk® Phantom: 4.8

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters