Plotting Streams of Events on Maps

An Events Stream linked to the Interactive Map widget utilizes Streaming Mode to plot multiple events with support for both clustering or non-clustering. This mode primarily assists analysts studying areas for the concentration of certain types of events.

Note

Only the latest 100,000 events in a stream can be plotted to the map. While the map is linked to the events stream, older events outside the 100,000 event limit are removed from the map.

Map Clustering

Streaming mode ignores polygon geo data in favor of coordinates used to cluster groups of events. These clusters are represented by donut charts, which provide an an accurate count of events that occur within relative geographic proximity to one another (such as within the same building or neighborhood).

To show more details from clusters:

1. From an open view containing an Interactive Map widget reading from a stream of events, locate a donut chart cluster.
2. Click the cluster. A popup opens, containing:
   • A count of the events within the cluster.
   • Two donut charts (one displaying composition of event types, the other displaying risk level).
   • The donut can be divided into different colors representing different event types (if more than one type occurred within the same area). Colors used in the donut chart do not conform to event decorations at this time.
3. Click elsewhere on the map, or within other clusters, to close the popup.

Disable Clustering

Clustering can be disabled at any time if this default setting is not desired. Un-clustered data uses dots to mark geographic locations, with dot sizes and glows to visualize zones by risk level or event density.

To disable clustering:

1. From an open view, in the upper-right of an Interactive Map widget, click the settings icon. A drawer opens to the right side.
2. Adjust the map options as necessary:
   1. Cluster Nearby Points: Check/uncheck to enable cluster/marker mode.
   2. Add Decorative Glow: Check the box to add a "glow" effect that emphasizes markers.
   3. Min and Max Sizing: Adjust the slider to size markers according to risk level and event density.
3. Click the X button to close the settings drawer.

Connect Events Stream or Notifications to Maps and Link Analysis Widgets

Linking the current view's stream of events or notifications to the Map or Link Analysis widgets provides a richer view when multiple entities are linked by activity or geographic location. Only the latest 100,000 events are shown on the map or link analysis.

To connect the view's stream of events to an already opened map or link analysis widgets:

1. From an open view, in the left drawer menu, click the Events Stream to open the events stream drawer containing all data fields.
2. At the top right of the Events Stream drawer, the Linkage icon appears. Click and drag the Linkage icon into the Map or Link Analysis widgets.
3. The Map or Link Analysis widget loads data from the events stream, and subscribes to new events or filters applied.

The events stream can also push changes to filters or search facets to the Map widget. At the top right of any events stream widget, click Commit. Doing so applies:

• Additional filters in Search Facets.
• Text searches or filters in the Events Stream widget.

Note

The Map widget only reflects changes to filters and searches in the Notifications or Events Stream widgets at the time the stream is dragged into the map. Here is an example:

The notifications widget contains 500 events when it is dragged into the map widget. The analyst applies a filter to reduce the number of notifications to 250. The map shows the original 500 notifications. The analyst applies an additional filter to reduce the number of notifications to 50, and then drags the notification widget into the map widget. The map widget changes to show only the 50 notifications the analyst most recently filtered.

Modifying the Events Stream

A stream of events that is linked to the Interactive Map widget can be further filtered two ways:

1. Use the Filter by search bar in the Events Stream widget and click Commit.
2. Use the search facets drawer to apply a detailed filter and click Apply Filters.