Skip to main content
Version: 2.13.X

Workstation Use

The Workstation interface consists of three tabs at the top-center. Navigate between these tabs to manage widgets, and settings governing data ingestion and event notifications.

The basic workflow in Workstation uses some combination of these steps:

  1. Create a view or open an existing view.
  2. Add widgets to views as needed.
  3. Drag event data from the notification or event stream widgets into Object Details Viewer.
  4. Review data.
  5. Optionally, drag events between widgets for additional possibilities. For example, link analysis for linkages between entities.

The Home Tab

Available Views lists all available user-configured views, which are customizable and shareable working spaces. As you configure views for your data, more will populate this screen.

Before you begin configuring views, make sure you have ingested your data from the Admin tab of Workstation. We recommend you also determine some basic Event Notification Settings if your data contains a risk_score value.

The left-hand drawer of the Home tab contains two buttons:

  1. Add New View - Name a view and provide an optional description.
  2. Manage View Templates - Review, open, or delete an existing view template.

For more information about views and view templates, see Workstation Views.

The Admin Tab

Ingest data or configure settings related to notifications in Cogynt Workstation within the Admin tab.

Ingestion Settings

Data Ingestion connects to data that was published by Cogynt Authoring/HCEP for immediate use in Workstation.

The leftmost column within the Admin tab, labelled Ingestion Settings, determines which events Cogynt Workstation will ingest for further analysis.

Notification Settings

Event notifications can be assigned to users of Cogynt Workstation when an event has occurred that matches a specific type and risk level.

Event notifications are critical to deeper analysis for datasets that utilize risk scoring. Users who can see the event notification have access to the event and all pre-requisite events that triggered the notification.

The Designer Tab

The Designer tab contains tools for managing tags, custom fields templates, event detail templates, and more.

Notification and Collection Tags

A notification or collection tag is a customized status used to color code and further define notifications related to specific events or collections. The use of tags improve workflows and organization for event notifications and collections.

System Tags

A system tag is versatile and can be applied to multiple types of Workstation objects, such as:

  • Event Notifications
  • Collections


A collection can be assigned multiple system tags, but only one collection tag.

An event notification can be assigned multiple system tags, but only one notification tag.

Event Decorations

Event decorations apply a global style to event types that impacts their appearance across the following Workstation widgets:

  • Collections
  • Link Analysis
  • Map widgets

Event Detail Templates

Event detail templates create templates that determine how an event is displayed when reviewing its Object Details. An object's layout can be adjusted, or its specific fields renamed for readability.

For more information, see Event Detail Templates.

Custom Field Templates

Custom Field Templates create a custom field to capture important details critical to your collection. Use this option to include notes, add tick boxes, and more.

Did you find the information that you needed?