Building Cases with Collections
Cogynt Workstation workflows often rely on collections to catalog events, comments, and custom fields within a single entity. The Collections widget is where collections are built and housed. Once created, collections can contain events, comments, and custom fields.
Assumptions
This guide assumes:
- That at least one collection exists in Workstation.
- That events have been ingested.
- Optionally, that event notifications have been configured.
Attaching Events to Collections
Events that have been ingested can be attached to a collection to indicate that the event is relevant to the collection.
To attach events to collections:
- From an open Events Explorer, Notifications, or Notifications Explorer widget, locate the event.
- Click and drag the event into the collection open inside the Object Details Viewer. Release to attach the event.
- To view events within a collection that have been loaded into Object Details Viewer, click the Items tab.
- Drag events into another Object Details Viewer for further analysis.
- One Object Details Viewer widget is required per event to be analyzed.
- Events cannot open in the same Object Details Viewer as the collection they came from.
- At least two Object Details Viewer widgets are recommended per workspace.
- Add other Object Details Viewer widgets to the working view, and repeat steps 1-4 as needed.
Events attached to collections can also be dragged into other widgets for further investigation. The Object Details Viewer widget must be open in your workspace.
Removing Events From Collections
Events that have been attached to a collection can be removed.
To remove events from collections:
- From the Collections Details Viewer, click the Items tab.
- From the right side of the event attached to the collection, click the X button to delete it.
From the toast at the bottom right of the screen, confirm deletion occurred or click Undo to return the event to the collection if deletion occurred in error.
Attaching Collections As Related
Collections can involve related collections, linking multiple incidents, events, and collection data for easy access and reference. For example, a collection for a geographic region can hold related collections for the names, addresses, and IDs for the people who work there.
To attach related collections:
- Open a workspace containing both collections and Object Details Viewer widgets.
- Drag a collection into Object Details Viewer. This collection will hold related collections.
- From the Collections widget, find other collections to link as related.
- Drag a related collection from the Collections widget into the Object Details Viewer. The Object Details Viewer shows two options:
- View collection details opens the collection.
- Add collection as related attaches the related collection to the collection open in Object Details Viewer.
- Drop a related collection into Add collection as related.
- Enter an optional description of how these collections are related.
- At the bottom of the open collection in Object Details Viewer, click the Related Collections dropdown.
- Confirm the related collection exists in the list, or drag another related collection into the Object Details Viewer.
Viewing Related Collections
Related collections can be viewed from any collection they belong to.
To view related collections:
- Drag a collection containing at least one related collection into the Object Details Viewer widget.
- At the bottom of the collection inside the Object Details Viewer widget, click the Related Collections dropdown.
- Locate the related collection to view from the list of related collections.
- Drag the related collection into any Object Details Viewer widget to view.