View the contents of closed cases

Supported in:

To view the contents of closed cases, complete the following steps:

  1. Go to the SOAR Search page.
  2. In the Filter section, select Status > Closed.
  3. Click Apply.
  4. In the list of closed cases, click the ID number of the selected case; you're redirected to the original case contents.

Need more help? Get answers from Community members and Google SecOps professionals.