View and create notes in Splunk Phantom

You can create a note in Splunk Phantom when working with tasks, artifacts, or cases. Use the Notes tab to view all of the notes, regardless of the user who created them. For example, perform the following tasks to view all notes for a container or case:

1. Navigate to a container or case in Splunk Phantom.
2. Click the Notes tab.

You can create a general note by clicking + Note.

You can filter the notes being shown by doing the following:

• In the Show field, select Task Notes, General Notes, or Artifact Notes from the drop-down list. By default, all notes are displayed.
• In the Phase field, select a workbook phase from the drop-down list.

Users who upgrade from releases of Splunk Phantom earlier than version 4.5 need to re-index containers before notes are searchable. Use the Search Settings page to re-index.