To learn more, visit the Splunk SOAR documentation.

​
Basic Parameters​

ParameterDescription
Container IDFilter by container ID. If specified, returns only the notes of this container.
OrderThe is the sorting order for the results.
SortField to sort results with.

​
Advanced Parameters​

ParameterDescription
Page NumberPage number of the results to fetch.
Page SizeSize of page to return.

​
Example Output​

{    "count": 2,    "data": [        {            "note_type": "general",            "task": null,            "container": 93,            "title": "my note",            "author": 1,            "modified_time": "2019-03-26T23:50:00.451152Z",            "content": "hello world",            "create_time": "2019-03-26T23:50:00.384661Z",            "artifact": null,            "phase": 4,            "id": 14        },        {            "note_type": "general",            "task": null,            "container": 93,            "title": "new note",            "author": 1,            "modified_time": "2019-03-27T00:16:08.220605Z",            "content": "hello world",            "create_time": "2019-03-27T00:14:09.090205Z",            "artifact": null,            "phase": 2,            "id": 16        }    ],    "num_pages": 1}

​
Workflow Library Example​

List Container Notes with Splunk Soar and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

List Container EvidenceList Containers