diff --git a/src/stats/serializers.py b/src/stats/serializers.py
index 6841d4e4aeb6fc6d689acb3c953844da7d0c46e0..b2f4a76ab1a720f5435987f3a5eab5ad784eaf59 100644
--- a/src/stats/serializers.py
+++ b/src/stats/serializers.py
@@ -29,5 +29,5 @@ class NoteSerializer(serializers.ModelSerializer):
         fields = '__all__'
         read_only_fields = ('created_at', 'update_at', 'created_by')
 
-    def get_creted_by_name(self, obj):
+    def get_created_by_name(self, obj):
         return obj.created_by.full_name
diff --git a/src/stats/views.py b/src/stats/views.py
index 322bb9b4ebeefd375591afe7fd35debba9cd4012..13d1cc0493df246e02b8f2bbd0b6e1f8df0f958e 100644
--- a/src/stats/views.py
+++ b/src/stats/views.py
@@ -12,5 +12,16 @@ class EventViewSet(viewsets.ModelViewSet):
 
 class NoteViewSet(viewsets.ModelViewSet):
     serializer_class = serializers.NoteSerializer
-    queryset = models.Note.objects.all()
     permission_classes = (IsStaffUser, )
+
+    def get_queryset(self):
+        queryset = models.Note.objects.all()
+        profile_id = self.request.query_params.get('profileID', None)
+        event_id = self.request.query_params.get('eventID', None)
+        if profile_id is not None and event_id is not None:
+            return queryset.filter(user=profile_id, event=event_id)
+        if profile_id is not None:
+            return queryset.filter(user=profile_id)
+        if event_id is not None:
+            return queryset.filter(event=event_id)
+        return queryset