Skip to main content
Version: 2.16.X

Drilldown Into Events

note

The Drilldown widget (and its functionality in Object Details Viewer) will not display data if the event's provenance is not available.

The Drilldown widget visualizes a hierarchical diagram of an event's provenance, and represents the underlying events and patterns that were defined in Cogynt Authoring. It is most useful for understanding the "why and how" of an event's creation and processing in Cogynt.

To use this widget, drag an event into it.

Events in Drilldown Widgets​

Once an event or event notification is dragged into the Drilldown widget, it displays:

  • A circular halo/ring representing the parent node.
  • A number indicating other events within the node's tree.
  • Circles represent events.
    • Grayed out events have no risk level.
    • Circles containing numbers represent the event's risk level. (A doughnut chart around the node visually represents risk level.)
    • Nodes are color-coded according to risk level, from most severe (red) to least (yellow).
  • Square icons represent pattern solutions.
    • A solution represents an instance in Authoring where a pattern was fulfilled or "matched" and produced an event.
    • The same pattern can be fulfilled many times and produces unique solutions each time.
  • Blue squares represent valid pattern solutions (i.e., not a retracted solution).
  • Gray squares represent retracted pattern solutions.

The Drilldown chart shows summary nodes that can be expanded or collapsed via the right-click context menu. Double-clicking any node in the graph will expand the next level of the tree.

Using Drilldown Widgets​

To review an event's hierarchy:

  1. With one or more Object Details Viewer widgets open, right-click any node in the drilldown chart to open a context menu.
  2. Click Send To, and then click a specific details viewer to send that node to the Object Details Viewer for inspection.
  3. Right-click the background to open a context menu containing several options:
    1. Click Clear All to remove the event from the widget.
    2. Click Cleanup Layout to automatically recalculate and layout the nodes in the graph.
  4. Double-click an Event or Solution to see its connection to the root node.
  5. At the upper right of the widget, find these controls:
    1. Click Curve Links to toggle between straight or curved lines.
    2. Click Stretch. A slider appears to change the spacing between nodes.
    3. Click Align. Four arrow buttons appear to determine the direction that the drill-down is plotted.
  6. At the upper left of the widget, find these controls:
    1. Click the arrow buttons within the circle to manually shift the current view up, down, left, or right.
    2. Click the center of the navigation circle to re-center the view.
    3. Click the square icon with a hand or pointer to toggle the mouse cursor between pointer and drag mode.
      1. In drag mode, click and drag the chart to drag icons and the view around.
      2. In pointer mode, click and drag a box around many nodes to select them.
    4. Use the vertical slider to zoom in or out of the view, or use the scroll wheel to zoom in and out.
note

When provenance is enabled, it is also possible to view it from the Drilldown tab of any event opened in Object Details Viewer.