Moves images down

Author: nastasha-solomon

docs/cases/cases-manage-settings.asciidoc

@@ -136,14 +136,14 @@ To use observables, you must have a https://www.elastic.co/pricing[Platinum subs
 
 Create custom observable types for enhanced case collaboration.
 
-NOTE: You can create up to 10 custom observable types.
-
-[role="screenshot"]
-image::images/cases-observable-types.png[Add an observable type in case settings]
-
 . In the *Observable types* section, click *Add observable*.
-. Enter a label for the observable type, then click *Save*.
+. Enter a descriptive label for the observable type, then click *Save*.
 
 After creating a new observable type, you can remove or edit it from the **Settings** page.
 
+NOTE: You can create up to 10 custom observable types.
+
 IMPORTANT: If you delete an observable that's using a custom observable type, the observable will no longer exist in the cases to which it was added.
+
+[role="screenshot"]
+image::images/cases-observable-types.png[Add an observable type in case settings]

docs/cases/cases-manage.asciidoc

@@ -207,9 +207,6 @@ To use observables, you must have a https://www.elastic.co/pricing[Platinum subs
 
 An observable is a piece of information about an investigation, for example, a suspicious URL or a file hash. Use observables to identify correlated incidents and better understand the severity and scope of a case.
 
-[role="screenshot"]
-image::images/cases-add-observables.png[Shows you where to add observables]
-
 To create an observable:
 
 . Click the *Observables* tab.
@@ -227,6 +224,9 @@ After adding an observables to a case, you can remove or edit it by using the **
 
 TIP: Go to the **Similar cases** tab to access other cases with the same observables. 
 
+[role="screenshot"]
+image::images/cases-add-observables.png[Shows you where to add observables]
+
 [float]
 [[cases-copy-case-uuid]]
 === Copy the case UUID

docs/serverless/investigate/cases-open-manage.asciidoc

@@ -225,9 +225,6 @@ To use observables, you must have the Security Analytics Essentials <<elasticsea
 
 An observable is a piece of information about an investigation, for example, a suspicious URL or a file hash. Use observables to identify correlated incidents and better understand the severity and scope of a case.
 
-[role="screenshot"]
-image::images/cases-open-manage/-cases-cases-add-observables.png[Shows you where to add observables]
-
 To create an observable:
 
 . Click the *Observables* tab.
@@ -245,6 +242,9 @@ After adding an observables to a case, you can remove or edit it by using the **
 
 TIP: Go to the **Similar cases** tab to access other cases with the same observables. 
 
+[role="screenshot"]
+image::images/cases-open-manage/-cases-cases-add-observables.png[Shows you where to add observables]
+
 [discrete]
 [[cases-copy-case-uuid]]
 === Copy the case UUID

docs/serverless/investigate/cases-settings.asciidoc

@@ -137,14 +137,14 @@ To use observables, you must have the Security Analytics Essentials <<elasticsea
 
 Create custom observable types for enhanced case collaboration.
 
-NOTE: You can create up to 10 custom observable types.
-
-[role="screenshot"]
-image::images/cases-settings/security-cases-observable-types.png[Add an observable type in case settings]
-
 . In the *Observable types* section, click *Add observable*.
-. Enter a label for the observable type, then click *Save*.
+. Enter a descriptive label for the observable type, then click *Save*.
 
 After creating a new observable type, you can remove or edit it from the **Settings** page.
 
+NOTE: You can create up to 10 custom observable types.
+
 IMPORTANT: If you delete an observable that's using a custom observable type, the observable will no longer exist in the cases to which it was added.
+
+[role="screenshot"]
+image::images/cases-settings/security-cases-observable-types.png[Add an observable type in case settings]