Analysts Notebook PDF
Analysts Notebook PDF
IBM
Note
Before using this information and the product it supports, read the information in “Notices” on page
293.
This edition applies to version 9, release 1, modification 0 of IBM® i2® Analyst's Notebook and to all subsequent
releases and modifications until otherwise indicated in new editions. Ensure that you are reading the appropriate
document for the version of the product that you are using. To find a specific version of this document, access the
Release materials section of the IBM Knowledge Center, and ensure that you select the correct version.
© Copyright International Business Machines Corporation 2018.
US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract
with IBM Corp.
IBM i2 Analyst's Notebook 9.2.1 user help
Welcome to the IBM i2 Analyst's Notebook® documentation, where you can find information about
how to use IBM i2 Analyst's Notebook in your investigations.
Getting started
“Analyst's Notebook data” on page 7
To build up a full picture of an investigation, Analyst's Notebook can access data from a range of
sources. Within Analyst's Notebook, data is stored as entities, links, and properties.
“Charts” on page 19
Charts display the intelligence that relates to an investigation. You can create charts both manually
and automatically by using information from various sources. This information might be personal
knowledge, written reports, photographs, video clips, spreadsheets, email, word-processing files, and
databases.
“Working with an Information Store” on page 69
An Information Store is a centralized data store that holds large volumes of analysis-ready data. If
you are using Analyst's Notebook Premium with Opal services, you can connect to i2 Analyze and log
in to an Information Store.
IBM i2 Analyst's Notebook Release Notes
IBM i2 Analyst's Notebook Premium Release Notes
Common tasks
“Add information to a chart” on page 39
To represent the information that you receive, you can add entities and links to your chart, then add
information to chart items. Items can store information in properties such as identity and date and
time, in attributes, and in cards.
“Import data” on page 44
Data in formats such as text files or spreadsheets can be directly imported into Analyst's Notebook
using import specifications. You can run imports using existing specifications or create your own
designs by using the step-by-step import wizard. Import designs give you control over how Notebook
converts data into entities and links that are placed on the chart surface for analysis.
“Search for information” on page 127
To find chart items that might be of interest to your investigation, you can search item properties for
specific information. Different search tools on the Analyze tab fulfill different needs.
“Find networks” on page 133
You can find the connections and intermediaries between items of interest, discover what is linked to
a specific entity, and find groups of interlinked entities. These networks might contain entities and
relationships that support the activity of items of interest.
“Modify item appearance” on page 225
After you add an item to the charting surface, you can modify its appearance from the default style
that is specified by the chart. You can emphasize items on the charting surface, and present only the
most crucial data on the charting surface.
“Arrange items” on page 231
You can automatically move chart items so that their presentation suits the data, and so that items
are uniformly positioned. You can improve the clarity of the chart, for example by shaping links so that
they do not obscure other chart items.
“Present and publish charts” on page 251
Copyright
© Copyright IBM Corporation 1991, 2018.
All rights reserved. May only be used pursuant to an IBM software license agreement. No part of this
publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated
into any computer language, in any form or by any means, electronic, mechanical, magnetic, optical,
chemical, manual, or otherwise, without prior written permission of IBM Corporation. IBM
Corporation grants you limited permission to make hardcopy or other reproductions of any machine-
readable documentation for your own use, provided that each such reproduction shall carry the IBM
Corporation copyright notice. No other rights under copyright are granted without prior written
permission of IBM Corporation. The document is not intended for production and is furnished “as is”
without warranty of any kind.
All warranties on this document are hereby disclaimed, including the warranty of non-
infringement and the implied warranties of merchantability and fitness for a particular purpose.
U.S. Government Users Restricted Rights — Use, duplication or disclosure restricted by GSA ADP
Schedule Contract with IBM Corporation.
Notices
This information was developed for products and services offered in the U.S.A.
IBM may not offer the products, services, or features discussed in this document in other countries.
Consult your local IBM representative for information on the products and services currently available
in your area. Any reference to an IBM product, program, or service is not intended to state or imply
that only that IBM product, program, or service may be used. Any functionally equivalent product,
program, or service that does not infringe any IBM intellectual property right may be used instead.
However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product,
program, or service.
IBM may have patents or pending patent applications covering subject matter described in this
document. The furnishing of this document does not grant you any license to these patents. You can
send license inquiries, in writing, to:
IBM Director of Licensing
IBM Corporation
North Castle Drive
Armonk, NY 10504-1785
U.S.A.
The following paragraph does not apply to the United Kingdom or any other country where such
provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION
PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR
IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT,
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer
of express or implied warranties in certain transactions, therefore, this statement may not apply to
you.
Trademarks
IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business
Machines Corp., registered in many jurisdictions worldwide. Other product and service names might
be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at
“Copyright and trademark information” at www.ibm.com/legal/copytrade.shtml.
Procedure
To contact IBM Support about a problem:
1. Define the problem, gather background information, and determine the severity of the problem.
For more information, see the Getting IBM Support topic in the Software Support Handbook.
2. Gather diagnostic information.
3. Submit the problem to IBM Support in one of the following ways:
• Online through the IBM Support Portal at Support Portal. You can open, update, and view all of
your service requests from the Service Request portlet on the Service Request page.
• By phone. For the phone number to call in your region, see the Directory of worldwide contacts
web page at https://www.ibm.com/planetwide/
Results
If the problem that you submit is for a software defect or for missing or inaccurate documentation,
IBM Support creates an Authorized Program Analysis Report (APAR). The APAR describes the
problem in detail. Whenever possible, IBM Support provides a workaround that you can implement
until the APAR is resolved and a fix is delivered. IBM publishes resolved APARs on the IBM Support
website daily, so that other users who experience the same problem can benefit from the same
resolution.
Entities
Entities represent real-world objects such as a people, locations, and bank accounts, or they
represent events such as meetings.
Each entity has a representation to determine how it is displayed on the chart surface and a type to
categorize it. An entity contains properties, which store information about the object or event. For
example, a person might have a name, date of birth, and eye color and a meeting might have date,
time, and duration.
Representation
You can choose how to display entities on your chart surface by using different entity representations,
for example icon, event frame, or theme line.
Type
Each entity has a type to categorize it, for example Person, Bank Account, Meeting, or Vehicle. This
type categorization means that you can locate and analyze information more efficiently.
The template that is used to create the chart contains a set of entity types. If you need an alternative
entity type, you can create your own by customizing your chart. However, before you create a new
entity type, make sure that a suitable one does not exist. You can merge any new entity type that you
create back into the standard template.
Entity types have characteristics that define the type such as icon image and name.
Related tasks
Adding items
You can add entities and links to your chart. The items on your chart represent real world objects and
relationships.
Related reference
Item type definitions
Entity types and link types categorize the information on your chart and are part of a chart's
properties. If the existing item types are not suitable for your data, you can add or edit entity types
and link types.
Links
A link represents a relationship between two entities, such as ownership of a vehicle by a person or a
transaction between two bank accounts. It is represented on the chart surface by a line between the
two entities.
Links might have an arrow for direction to indicate a flow of commodities or transaction, or they can
be without direction, representing some general association.
All links have the same representation of a line between the two related entities. The style of the line
can indicate confidence in the relationship. For example, a solid line might represent an established
relationship such as the documented ownership of a vehicle. The template that is used to create the
chart contains a set of line strengths that associate a confidence level with a line style. For example, a
solid line to represent confirmed information, a dashed line to represent unconfirmed information,
and a dotted line to represent tentative information. You can also create your own by customizing the
chart.
If there are several relationships or transactions between the same two entities, you can choose to
display them as one single link, a link for each direction, or as separate links. This link multiplicity
setting is part of a link's style.
A link contains properties, which store information about it. For example, a transaction might have an
amount and a date and time.
Related tasks
Adding items
You can add entities and links to your chart. The items on your chart represent real world objects and
relationships.
Related reference
Item type definitions
Properties
Entities and links contain properties, which are used to store information about that entity or link.
Selecting the correct type of property to store information is essential for both visualization and
analysis.
Properties can describe the following characteristics of a chart item:
• Information that is known about the chart item such as its label and description.
• Provenance details, such as the source or reliability of the chart item or of an individual piece of
information.
• Settings to do with how the chart item is displayed such as line strength, fill color, and other visible
elements.
Information about an item might come from multiple sources, such as databases, witness
statements, or external documents. This information can be stored in cards, attributes, or when it
comes from a connected data source, in data records.
Note: By default, only the item label is displayed on the chart surface. Apart from information that is
held on cards or data records, all other properties can be selected for display.
Identities
An identity uniquely identifies an item on a chart or provides a unique link back to entity or link
information in a data source.
Two types of identities apply in different situations:
• An Analyst's Notebook identity uniquely identifies entities in the chart (entities only).
• For items created from one or more connected data sources, database identities uniquely identify
the original source records (entities and links).
An entity can have an Analyst's Notebook identity, one or more database identities, or both.
Alternatively, an entity can have no identity.
Identities are used to match items when you add new items to the chart by copying and pasting,
importing, or adding them from a data source. If the item that is being added has an identity that
matches the identity of an item that is already on the chart, the items are merged. The item that you
are adding to the chart might have more than one identity, for example two database identities, so it
might match more than one item on the chart. You can decide what to do, based on information that
Analyst's Notebook provides.
Database identity
Entities and links can have one or more database identities. The database identity uniquely identifies
the item in the data source. When you are connected to the data source, you can view the live
database information that is associated with the item.
If you chart an item from a connected data source, the Analyst's Notebook identity might be set to
blank because a database identity is assigned to the item. Whether the identity is set to blank
depends on how the connection to the data source is configured.
Related tasks
Setting the identity
An entity's identity uniquely identifies it on the chart, regardless of how it is displayed. Analyzing
charts is typically based on the identity of entities.
Displaying data records
Depending on the data source, data records are attached to items when you add data from a data
source. Data records contain data that is copied from the source record, so that you can view any
copied data that is not displayed on the charting surface.
Related reference
Label behavior
Behavior options determine how labels are handled when links are created or items are merged. Set
the behavior for your needs within your standard template.
Data records
When you chart information from a data source, Analyst's Notebook creates a reference back to the
information in the data source. It can also create a record that contains a copy of the item's data from
that data source.
The creation of a data record is controlled by the product that you are charting from. For example, if
you are charting from IBM i2 iBase, this option is configured in the charting scheme.
The data record that is created forms part of the item. It contains the information that was in the data
source at the time that the item was created on the chart.
You cannot edit the content of a data record. If the original data source is updated after the data
record was created, the record is not updated to reflect those changes.
If an item contains information from more than one connected data source, it has a data record for
each data source. For example, two data sources might contain different information about the same
person. When you view a data record, it indicates which data source the information is from.
An item that is charted from a data source has a database identity that links back into the data
source. When you are connected to the data source, you can view the data in the data source from
within Analyst's Notebook. Depending on the data source and the connection to it, in some cases you
can also edit the data to update the data source. When you edit the data source in this way, the item
on the chart is charted again and the data record in the chart is refreshed.
Display
What information you can choose to display for an entity and how you display it on the chart surface
depends on which representation you use.
Fonts
You can set the font type, size, style, color, and shading for a chart item. For event frames, text blocks
and text labels, you can also set the text alignment.
Link multiplicity
When multiple links are present between two entities, link multiplicity determines how these links are
displayed. Link multiplicity can be:
• Single: The connection between two entities is shown as a single link. This single link represents an
association between two entities, which might in reality, comprise many different instances of that
association.
• Directed: The connection between two entities is represented by one link for each possible
direction. A directed connection has therefore a maximum of four links. Each of those links might
represent several instances of the association, all in that same direction such as several
transactions from one bank account to another.
• Multiple: Each link between two entities is displayed individually.
Related tasks
Setting the default style
When you add new items to your chart, Analyst's Notebook uses the default style to display the item.
You can set the default style for links and for each different entity representation. For example, you
can set a default appearance for new theme lines or icons.
Cards
You can add descriptive unstructured information to items by putting the information into cards and
add provenance information to them. Typically one card is used for each piece of supplementary
information. You can use information in cards during analysis, such as searching.
Card information cannot be displayed on the chart surface.
You can store the following information on a card:
• A single line of text that summarizes the information.
• The main information that you want to include about the entity or link.
• Date and time, including a time zone. Use the date and time that the event or information in the card
occurred, the date and time that the information was obtained, or the date and time that you added
it to the chart item. Your organization might have guidelines for you to follow. You can choose to add
a description of the date and time if the exact date or time is not known such as about 4 pm or
around lunchtime. Alternatively you can also use the description to indicate what is represented by
the date and time that you entered.
• Provenance information such as the source, reliability of the source, reliability of the information, or
its privacy rating.
To make it easier to manage cards or assign provenance information, add one card per piece or
information or one card for each set of information from a specific source. The choice that you make
Provenance information
The ability to track information to the original source and to assess the reliability of the information or
the source is important in investigations.
Some examples of the types of information are listed:
• The source and type of the information such as a witness statement that has a document reference
number. When you chart an item from a data source, it contains a database identity that links it
back to the original data source.
• The reliability of the source that provided the information or the reliability of the information itself.
For example, you might request information from an agency that concerns the registered owner of a
vehicle. This information might be considered reliable whereas an overheard conversation that
leads you to believe that a relationship exists between two suspects might not be accurate.
• The privacy rating or classification of the information, that is, who is allowed to know about the
information.
You can add provenance information to chart items and to individual pieces of information in cards.
For example, you might have several pieces of information about a specific person. You can add each
piece of information to a card and include provenance information on each card.
The chart template controls what rating scale is used. Many organizations adopt their own grading
system. You can customize the rating scales to meet your requirements.
Related tasks
Setting the description & grades
All chart items are given grading information. Grades on an item classify or provide an evaluation of
some quality of the information that is represented by that item. For example, if the information is
reliable, confidential or from a trustworthy source.
Attributes
You can store specific discrete pieces of information on chart items as attributes. Attributes are often
displayed as part of the item on a chart surface for presentation purposes and are also used in
analysis, such as filtering.
Analyst's Notebook has two types of attributes:
• Attributes store information about an item such as a person's date of birth or the make of a
particular item. You can add attributes manually or you can import information into attributes from
a file or a data source.
• Analysis attributes are automatically generated and store calculated information such as the day of
the week that an event occurred or whether an item has any cards.
Attributes are useful during analysis. For example, you can filter on attributes to choose which items
to display on the chart surface. When you list the items on the chart, you can sort based on attributes.
Semantic types
To benefit from the visualization and analysis capabilities of Analyst's Notebook, assign semantic
types to items or attributes to identify their meaning.
Analyst's Notebook recognizes the semantic types that are assigned to data, enhancing the amount of
analysis that is available. Item types that have a common semantic parent type are recognized as
being related and might be returned in search results.
IBM provides the IBM i2 Semantic Type Library, which consists of a set of entity, link, and property
semantic types. These semantic types can be assigned to the entity types, link types, and property
types. Some of these semantic types are used specifically by Analyst's Notebook to match entities,
for example a national identifier for a person, or a license plate for a vehicle.
If you cannot locate a suitable semantic type, you can derive your own custom semantic type from
the appropriate generalized semantic type. A custom semantic type is treated as a specialization of
its recognized parent semantic type.
Entities or properties
When you put your data into Analyst's Notebook, it is important to decide when to create separate
entities and when to store information in a single entity. For example, you might have the following
information about a person:
• Name
• Date of birth
• Nationality
• Address
• Bank account details
Example charts
Several example charts are provided with Analyst's Notebook. They show examples of how you might
want to chart and store information. The charts are typically in C:\Users\<username>\Documents
\i2\i2 Analyst's Notebook 9\Example Charts. They include examples of:
• Storing and charting financial data in different ways.
• The use of types and styles to highlight differences in the data.
• The use of different entity representations to present your information, such as event frames when
you want to display the date, time, and description of events.
• Storing and charting geographical data.
• Handling data that contains hyperlinks, pictures, and different language alphabets.
• Combining different chart styles (association and timeline) in a single chart.
If you open these charts in Analyst's Notebook, they contain annotation that helps you to understand
more about storing and charting data.
Creating a chart
A new Analyst's Notebook chart is based on a template. When you create a chart, you can choose
between the standard template and other templates.
Procedure
• To create a chart that is based on the standard template, click File > New > New Standard Chart.
• To create a chart that is based on a different template:
a) Click File > New > New from Template.
The New From Template window opens.
b) In the Create a area, click Chart.
c) In the Based on area, select a template from the list. To use a template that is not in the list,
click Browse, locate then select the template, then click Open.
Note: To create a chart that contains no entity types, link types, or attribute classes, select
Empty Template from the list.
d) Click OK.
Analyst's Notebook creates a chart that is based on the chosen template.
Related reference
Viewing and maintaining chart summary properties
Opening charts
Analyst's Notebook can open Analyst's Notebook charts (.anb), Analyst's Notebook Exchange charts
(.anx), and Text Chart visualizations (.tcv).
Procedure
To open a chart, use the following steps:
1. Click File > Open.
2. In the Open window, navigate to the directory that contains the chart you want to open.
3. Double-click the chart that you want to open. You can select multiple files to open several charts
at the same time.
If a chart is closed abnormally, for example as a result of a power failure, Analyst's Notebook
might save recovery files. These charts are recovered next time that you start Analyst's Notebook.
Related concepts
Share details about charts
You can add information about a chart to its cover sheet. The cover sheet can help recipients of the
chart to understand the purpose of the chart and identify the author.
Procedure
To copy charts, complete the following steps:
1. Click anywhere on the background of the chart that you want to copy to clear any selected items.
2. Click the Home tab, and then in the Clipboard group, click Copy > Copy Chart.
3. Open a new blank chart. Right-click anywhere on the chart background and click Paste.
4. You can paste the chart into a different application as an OLE object.
Summary Standard information about the chart. The cover sheet contains the following
property summary properties, which you can add information into:
• Title
• Subject
• Author
• Keywords
• Category
• Comments
Custom Information about the chart that is not included in the summary properties. You can
property use custom properties to store chart characteristics that are specific to your
organization.
Two custom properties are created automatically when you create a chart from the
Standard.ant template. These custom properties are Case and Classification. You
can enter values for these properties and add your own custom properties.
The headers and footers of your printed chart can contain information from the cover sheet. For
example, if your chart runs over a number of pages you might stamp each page with a security
classification, chart title, and publication status such as 'draft'.
Charts 21
you first save a chart, or every time you save, or never. To choose an option, click File > Options, and
then on the Save page select the appropriate option in the Cover Sheet area.
To open the editable cover sheet of an open chart at any time, click File > Cover Sheet. You can edit
the same information on the Summary > Description and Origin pages of the Chart Properties
window.
Procedure
To add information to the cover sheet of a chart:
1. Click File > Cover Sheet.
The Cover Sheet window opens.
2. Add information to the summary properties.
Tip: To help other users to find the chart in repositories such as the Analysis Repository, enter
information that they might search for. For example, you might enter the name of the investigation
in the Subject property.
3. To create a custom property, click New in the Custom area.
4. To configure the cover sheet to open when the chart is opened, select the On Open check box.
5. Click OK.
Saving charts
Analyst's Notebook can save any open chart in Analyst's Notebook (.anb) format. The option to
include and customize a cover sheet is available when you save the chart. The cover sheet provides a
brief overview of the chart's contents and purpose. Properties of the cover sheet can be customized
just before the chart is saved.
Procedure
To save a chart:
1. Click File > Save, or Save As.
Results
When you save a chart, it is validated for any significant compatibility issues with earlier versions. If
the application finds a problem, a relevant warning is displayed.
Procedure
To save a chart as a template:
1. Click File > Save As.
The Cover Sheet might be shown.
2. If the Cover Sheet is shown, click OK to save the Cover Sheet details, or click Cancel to close the
Cover Sheet.
The Save As window is shown.
3. Select the folder to save the template and type a file name in the File name box.
4. Select Analyst's Notebook Template (*ant) from the Save as type list.
5. Click OK.
Results
All of entity types, link types, attribute classes, and any chart items on the chart are saved in the
template.
Related tasks
Creating a template
A template contains preconfigured chart properties, and lists of permitted entity types and link types.
When you base a chart on a template, the appearance and meaning of data in the chart are consistent
with other charts based on that template.
Charts 23
– Definitions: entity types, link types, attribute classes, attribute entries and their semantic type
assignments, grading system, line strengths, and date and time formats
– Time Bar display settings
• All the default styles for each entity representation and for links
• User palettes and their membership
• The legend
• Snapshots
• Page setup settings
• Whether entity types and attribute entries, or both are available in the palette bar
• Display of the grid and page boundaries
Procedure
To manage user palettes:
1. Click File, point to Chart Properties, and then click User Palettes. The User Palettes window
opens. This window shows the name of the user palette, and whether it contains:
• Entity types
3. Click OK.
Procedure
To modify the content of an existing user palette:
1. Click File > Chart Properties.
The Chart Properties window is shown.
2. Click Definitions and then select the page that you are interested in:
• Entity types
• Link types
• Attribute classes
• Attribute entries
3. Select the entity types, link types, attribute classes, or attribute entries that you want to add to or
remove from the user palette.
4. Click Properties and select the palettes to add the types and attribute entries.
5. Click OK.
Results
The modified user palette is shown in the list of palettes in the Insert from Palette pane, and in the
User Palettes window.
Tip: To set up user palettes that you want to use in many different charts, save your chart as a
template.
Charts 25
Changing chart properties
Chart properties are a collection of settings and options that apply to a chart, such as the default date
and time for items. Chart properties also specify the item types and attribute classes that are
available for use in that chart.
Chart properties are saved along with your chart. These properties mean that when you distribute
your chart, the recipient sees the chart that you saved, in the same format. Similarly, when you open a
chart that you are sent, all the properties are as they were when the chart was saved.
You can set up templates to include chart properties that you use often. You can then create new
charts that are based on these templates.
Label behavior
Behavior options determine how labels are handled when links are created or items are merged. Set
the behavior for your needs within your standard template.
Charts 27
Labels can have numbers that are embedded within them, that is, only part of the label is a number.
Analyst's Notebook can recognize that a label contains an embedded number.
To see the numeric value that Analyst's Notebook interprets from the link label, you can view the
link's Label Value analysis attribute. This attribute, contains the numeric value of the link, as
extracted from the label:
The rest of the label, that is to the left and right of the numerical part, is still merged.
Band Description
Interval The interval band shows the intervals in which the time bar is displayed. For example,
hours, days, or months.
Tick The tick band consists of major and minor ticks. Major ticks represent, for example,
days or hours, and depend on the rate of time flow. Minor ticks show times between
major ticks. Minor ticks do not have labels. When you move your mouse pointer over a
minor tick, hover help is displayed that shows the date and time of the chart at that
position.
Marker The marker band contains marker symbols that indicate controlling items on the
chart. Controlling items are ordered and have both a date and time.
Procedure
To edit the time bar:
1. Click File > Chart Properties > Options > Time Bar > Display.
Time zones
When you create a chart that contains events that take place in different time zones, you can specify
in which time zone each event took place.
Each item on your chart with a date and a time has a time zone. This time zone might or might not be
the same as the time zone of the chart.
Note: Date and time attributes do not have a time zone.
Charts 29
A chart item can have both a date and a time, or just a date or a time. It can also have a description of
approximately when it occurred, if the exact date and time is not known.
Attribute definitions
Attribute classes categorize the information that is stored as attributes on chart items and are part of
a chart's properties. If the existing attribute classes are not suitable for your data, you can add or edit
attribute classes. Attribute entries are preset values for attributes of a specific attribute class. For
values that you reuse regularly, define attribute entries and add them to the appropriate palettes.
When you define an attribute class, you can configure its style and format and choose which user
palettes contain that attribute class. For example, you can choose to display a symbol, prefix or suffix
on the charting surface and set the font properties of an attribute class.
Note: If you add a prefix or suffix, such as a dollar sign for a monetary value, Analyst's Notebook does
not leave a space between the value and the prefix or suffix. You must enter a space as part of the
prefix or suffix.
You can also choose whether to display the attribute value itself. For example, when you use a flag
attribute, displaying the attribute name alone might be sufficient. The display options vary depending
on the type of the attribute class.
Charts 31
You can derive custom semantic types based on the ones in the IBM i2 Semantic Type Library, then
use them in other charts and share them with colleagues. Deriving a custom semantic type is
appropriate when you need a more accurate classification of your data than the standard type library
provides.
Procedure
To define the grading system:
1. Click File > Chart Properties > Definitions > Grading System.
The grading system is displayed.
2. Select the Grade list to which you want to add a grade, then click New below the list.
A new grade is created below the selected grade with the default name of "New Entry".
3. Select this grade and type the letter, number, or name that is required for this grade.
4. To move the grade up or down the list, click the new grade and drag it to its new position.
Procedure
To modify the available line strengths:
1. Click File > Chart Properties > Definitions > Line Strengths.
2. Click one of the following options:
Field Description
Title Enter a title for this chart. On saving your chart
for the first time, the Title is used as the standard
file name, however you can change the title as
required.
Subject Enter the subject of the chart. You can use the
subject field to group similar types of chart
together, for example, all those charts that
pertain to a particular investigation.
Keywords Use keywords to help readers identify the
purpose of your chart.
Charts 33
Field Description
Category A broad term, for example Surveillance, to allow
your chart to be grouped with other similar
charts.
Comments Use comments to record useful information
about the chart.
For every new chart that you create from the Standard template, two custom properties are
displayed, to which you can add or delete values.
Field Description
Case The name of the operation or case or criminal
investigation to which the chart relates.
Classification The sensitivity level of the information that is
contained in the chart, for example, Restricted.
Fields Description
Author The name of the person who created the chart.
Template The template on which this chart was based.
You can select the full path of the template. Click
anywhere in the box and drag to the right to see
the full path.
You can then copy the path to the clipboard.
Note: The Template property is not available for
printing in the headers and footers of your chart.
Editing Time The total amount of time this chart is open for
editing.
Created The date and time that this chart was created.
Last Saved The date and time that the chart was last saved.
Last Printed The date and time that the chart was last printed.
Revision Number The number of times the chart is modified and
saved.
Charts 35
A new Analyst's Notebook chart is based on a template. When you create a chart, you can choose
between the standard template and other templates.
Creating a template
A template contains preconfigured chart properties, and lists of permitted entity types and link types.
When you base a chart on a template, the appearance and meaning of data in the chart are consistent
with other charts based on that template.
Procedure
To create a template, use the following steps:
1. Update your chart properties.
2. Click File > Template > Create Template. The Create Template window opens.
3. In the Create Template window, select the Location to store the template:
Option Description
Local template Local templates are designed to be used to ensure consistency between the
charts that you create when working independently. Templates should be
stored locally when working on chart types that are not used by the rest of
your team.
Workgroup Workgroup templates are designed to be used by the wider team.
template
Note: When there is no workgroup template path set, this option is not
available.
Standard Sets this template as the default template to use for new charts.
Note: The paths that are used to store templates are defined in File > Options > Templates.
4. Optional: To create a template which contains all of the chart items and the legend, select Include
Chart Items and Legend.
5. Click OK to create the template.
Related tasks
Saving a chart as a template
Procedure
To add chart properties that are stored in a template to an existing chart:
1. Click File > Template > Merge Template.
The Merge Template window appears.
2. Choose the template to apply.
3. Select the types of chart property to apply.
4. Use Replace Existing Features to overwrite existing properties.
5. Click OK to apply the chart properties.
Charts 37
38 IBM i2 Analyst's Notebook: User Help
Add information to a chart
To represent the information that you receive, you can add entities and links to your chart, then add
information to chart items. Items can store information in properties such as identity and date and
time, in attributes, and in cards.
For example, to represent a telephone call, you might perform the following actions:
• Add two telephone entities to the chart
• Add a link between the telephones to represent the call
• Enter a telephone number into the identity property of each entity
• Enter the call date and time into the date and time properties of the link, and add the call duration
as an attribute
To emphasize specific items that you add to the chart, you can modify item appearance. You might
identify which items are of interest directly from the information that you receive. Alternatively, you
might identify items of interest after you use Analyst's Notebook to analyze your data.
After you add information to a chart, you can use a label to annotate the chart, add a summary, or add
a title.
Related concepts
Modify item appearance
After you add an item to the charting surface, you can modify its appearance from the default style
that is specified by the chart. You can emphasize items on the charting surface, and present only the
most crucial data on the charting surface.
Adding items
You can add entities and links to your chart. The items on your chart represent real world objects and
relationships.
Procedure
To add an item to the chart:
1. To display the Insert from Palette pane, click the Home tab, and then in the Palettes group, click
Insert from Palette.
2. To add an entity, select a representation at the top of the Entities section, select a palette from
the drop-down list, then drag an entity type onto the charting surface.
Tip: To add multiple entities of the same type, double-click the entity type, then click the charting
surface to add entities. To stop adding entities, press Esc. You can add multiple links in the same
way, in the Links section.
3. To add a link between two entities, select a palette from the drop-down list at the top of the Links
section, click a link type, then drag between the entities.
Related concepts
Entities
Entities represent real-world objects such as a people, locations, and bank accounts, or they
represent events such as meetings.
Links
Procedure
To search for an entity type:
1. In the Insert from Palette pane, click the Search button at the top of the Entities section.
2. In the Search entity types box, type the first few characters of the entity type that you are looking
for. As you type, the list updates to display entity types that match the search text.
Note: You can search for link types in the same way in the Links section.
Procedure
• To edit the properties of an item, click the item on the charting surface, click the Home tab, and
then in the Edit Properties group click Data, Attributes, or Cards. In the Edit window, Analyst's
Notebook opens the corresponding folder of property pages.
Tip: To add the same information to several items at the same time, select them all, right-click on
one of the items, then click Combined Properties. For example, several telephones might have
the same area code. If some of the items already have a value for the property that you want to
edit, Analyst's Notebook displays blue hatching instead of a property value. You can collectively
modify date and time, description and grades, attributes, and style properties.
• To add an attribute:
a) In the Edit window, click Item Properties > Attributes.
b) Click Add.
c) Select an attribute class from a palette, then enter information.
Alternatively, in the Attributes panel of the Insert from Palette pane, click an attribute class,
enter or select a value, then click OK.
• To add a card:
a) In the Edit window, click Cards > Card List.
b) Click New.
c) Enter the information that you have.
You can include provenance information that is specific to the card, such as the source,
reliability of the source, reliability of the information, or its privacy rating.
• The Edit window contains a Style folder. You can use the properties in that folder to add an image
to the item. You can also use the pages in that folder to modify aspects of item appearance.
Procedure
To set an identity:
1. Right-click an item, and select Edit Item Properties. The Edit window is shown.
2. Select Item Properties > Label & Identity.
3. Enter the identity of the chart item in the Identity box.
4. To set a label that is different from the identity, select Label is Different from Identity then enter
a label.
5. Optional: If an item has a database identity, it is shown in the Database Identities box.
6. Click OK.
Related concepts
Identities
An identity uniquely identifies an item on a chart or provides a unique link back to entity or link
information in a data source.
Procedure
To set the date & time:
1. Right-click an item, and select Edit Item Properties.
The Edit window is shown.
2. Select Item Properties > Date & Time and complete the Date & Time page.
3. Select the Date and Time check boxes and enter the date or time.
4. If you do not know the date or time, enter a description about when the event occurred.
For example, "In the afternoon".
5. Set the time zone for the item.
6. Select how the item is ordered on the chart:
Option Description
Free An item is free when it is not ordered and can be moved anywhere on
the chart.
Procedure
To set descriptions and grades:
1. Right-click an item, and select Edit Item Properties.
The Edit window is shown.
2. Select Item Properties > Description & Grades.
3. Enter the description.
4. Select the grades to add to an item from the lists in the Grades area. The following system is an
example of one such system, but this grading system might differ in your organization:
Option Description
Grade 1 A to E and Ungraded
Used for the reliability of the source of the information, where A signifies that there is
no doubt of the trustworthiness and competence of the source. E signifies that there is
considerable doubt.
Adding an image
You can replace the standard icons that Analyst's Notebook uses for icon, theme line, and event
frame representations with custom images. An image can help to provide extra information.
Procedure
To add an image to your selection:
1. Right-click an item, and select Edit Item Properties. The Edit window is shown.
2. Select Style > Picture.
3. Locate the image that you want to add. If you know where the image is stored, you can browse to
this location. You can also paste an image from the clipboard.
Tip: The Picture Preview area of the Edit window shows how the picture appears.
4. Set the size of the image by selecting one of the following options:
Option Description
Enlargement Set the enlargement size of the picture.
Custom Use the slider to change the size of the picture.
5. Click OK.
Procedure
To add a chart label:
1. Click the Home tab, and then in the Insert Entities group, click Label.
2. Move the pointer where you want the label to be positioned. When it is over the charting surface,
the pointer changes to show that you are adding a label to the chart.
Tip: To cancel Insert mode, press Esc.
3. Click to add the label.
4. To change the label text, click the label. Enter the text, then click anywhere else on the chart.
Tip: Press Ctrl+Enter to enter a new line of text.
Format Description
Text files In text files that are suitable for import, the lines of data have a
(.txt, .csv, .tsv) consistent format. The data for one item is never broken across lines.
Data can be separated by tabs or with a syntactical separator such as a
comma. Some text file formats are predefined, for example a tab-
separated value file (.tsv) or a comma-separated value file (.csv).
Clipboard Analyst's Notebook can import text data from the Windows clipboard in
any of the supported formats.
Microsoft Excel Analyst's Notebook interprets the rows and columns of a spreadsheet in
spreadsheet file the same way that it interprets the lines and separators of a text file.
(.xls, .xlsx)
If the data is in an XML file format that is recognized by Analyst's Notebook, such as an Exchange file,
an import specification is not necessary.
Note: Data imports from XML files cannot be used to create records in i2 Analyze.
Procedure
To locate files for import:
1. Click the Home tab, and then click Import. A list of options is displayed in a drop-down menu.
Option Description
Import from File Opens the Select Data File to Import window.
Import from Clipboard Opens the Clipboard Preview window and
shows any text data on your clipboard.
Import from Excel Spreadsheet Opens the Select Data File to Import window
and shows any spreadsheet files.
2. Select the option from the menu that describes the data you want to import.
a) If you select a text file format such as .txt, the Select How to Import the File pane opens.
b) If you select a spreadsheet file format such as .xls, the Select How to Import the File pane
opens with an extra option to select a worksheet. If your spreadsheet contains only a single
worksheet, that worksheet is selected automatically.
c) If you want to select data from your clipboard, you need to copy the data to the clipboard. The
Clipboard Preview window shows the contents of the clipboard. If the clipboard contains the
correct data, click Continue.
No flag Column headers in the specification match column headers in the data source you are
importing. You can use this specification to import the data in the same way that you
imported previous data with this specification.
No column headers are defined in the specification. The specification is a match for the
data, based on a comparison between the format of the data in the first few rows of the
file and the format that is expected by the specification.
You can use this specification as a template to create a new specification. The new
specification might not require any changes or only minor changes to be suitable for
your data.
There are incompatibilities between the data source and the specification. Successful
import is not possible.
Note: Specifications in this category are not listed unless you clear the List only
specifications that match the import data check box.
3. To use a specification that is listed to run the import, click Use existing specification, select the
specification, then click OK.
The application displays the Importing window to report on the progress of the import process.
The window contains the following information:
• The duration of the import process
• An indication of whether the process was successful
• A count of how many entities and links were created
4. Optional: In the Importing window, click Save Report to save detailed information about the
import process as an HTML file.
Note: If you do not take this opportunity to save a report, you do not have a permanent record of
the import process.
What to do next
If your data is not compatible with an existing specification, you can import your data with a new
specification or you can use an existing specification as a template.
What to do next
If you want to import data that requires you to create or edit an import specification, you can start
from the Importing Tasks pane. Follow the procedure for creating or editing an import specification.
Procedure
To define the structure of the incoming data:
1. On the Define Columns page of the import wizard, set how your data is structured.
Option Description
Delimited Within each row, fields in the data are separated by particular characters called
delimiters.
Select any combination of the Comma, Semicolon, Tab, or Space check boxes.
Optionally, select Other and enter your own character.
Fixed Width Within each row, every field has the same width as the equivalent field in the other
rows. Each field within a row might have a different width, but the width of a
specific field is consistent throughout every row of the data.
Click the displayed data, and specify where each field begins:
• To insert a column break, click in the ruler area at the position where you want a
break.
• To move a column break, drag its vertical line to a new position.
• To delete a column break, double-click it.
By default, the wizard assumes that the incoming data uses the same text encoding as your operating
system. If the table contains characters that you do not recognize, you can tell the wizard to try a
different one.
2. Click Encoding. In the Encoding area, select an encoding option.
Option Description
Plain Text The incoming data contains only ASCII text, which includes only
punctuation marks, uppercase and lowercase Latin alphabetic characters,
and digits 0 - 9.
Regional Settings The incoming data uses the encoding that the operating system specifies
Default as the system default.
Other Encoding The incoming data uses the encoding that you select from a list.
The result of using the selected encoding for the incoming data is displayed in the Preview box. If
characters are not correctly displayed, select a different encoding. Otherwise, click OK.
3. When the table in the import wizard displays correctly formatted tabular data, click Next.
Procedure
If a row in the incoming data contains column headers instead of values to be imported:
• Select Extract column headers from row and enter the row number in the adjacent field.
The column headers above the table in the wizard change to display the names from the data.
If some rows in the incoming data are prefixed with a particular character to indicate that they do not
contain values:
• Select Ignore rows starting with and enter the character in the adjacent field.
Every row that begins with that character is excluded from the import.
After the rules do their work, you can exclude or reinstate individual rows:
• To exclude specific rows from the import, select the rows in the table and click Exclude Selected
Rows.
• To reinstate excluded rows, select the rows in the table and click Include Selected Rows.
Results
Rows that are excluded from the import are struck through in the table. The application does not
import excluded rows when you reach the end of the wizard.
Combining columns
You can create new values in the incoming data by combining values from the existing columns. For
example, you might combine an "Area Code" column and "Local Number" column to create a "Full
Telephone Number" column.
Procedure
To merge columns:
1. On the Column Actions page, click New.
The New Column window is displayed.
2. Enter a name in the Enter the name of the new column field.
For example, you might enter "Full Telephone Number".
3. From the Source Columns list, double-click a column or a separator to add it to the Joined
Columns list.
Modifying values
You can use column actions to modify incoming data values. For example, you can remove specific
characters, or change the capitalization of text. You can also configure a column action to modify data
only when specific conditions are met.
Procedure
To create a column action and apply it to a column:
1. Select the column that you want to modify.
2. From the Available Actions list, select a column action and then use the arrow buttons to move it
to the Actions Applied list.
The wizard displays an icon in the header of the selected column to indicate that a column action
is set.
3. Configure the settings for the column action.
The configuration for each action is different.
For example, if you select the Add Prefix action, you must enter the prefix that you want to add.
4. Optional: Configure the column action to modify values only when specific conditions are met.
You can create more than one condition.
a) In the Condition list of the Apply only when the following conditions are met box, select a
condition.
b) Enter an appropriate value into the Value field.
c) Optional: To stop processing subsequent actions when the conditions are met, select the Stop
processing subsequent actions when conditions are met check box.
Column actions
The Analyst's Notebook import wizard provides column actions that can modify incoming data in
several different ways. The following table contains a complete list of the available actions.
Find and Replace Text Replaces a sequence of characters with another sequence of
characters. For example, to remove English ordinal suffixes, you can
replace st, nd, rd, and th with a sequence of zero characters.
Note: This column action can cause unintended changes. For example,
if you replace the st date ordinal suffix with zero characters, words
such as August might be modified too.
Prefix with Another Adds the value from another column to the beginning of the value in the
Column selected column. For example, you can prefix time values with date
values to create a combined date and time column. You can also
specify a separator character to use between the values.
Condition Description
Contains The value contains the specified sequence of characters.
Does not contain The value does not contain the specified sequence of characters.
Does not end with The value does not end with the specified sequence of characters.
Does not start with The value does not start with the specified sequence of characters.
Ends with The value ends with the specified sequence of characters.
Is blank The value is blank.
Procedure
To export your data:
1. In the Column Actions page, click Export.
The Save Data As window is shown.
2. In the Save Data As window, select the folder to save the exported data in.
3. In the File name field, enter a file name for the exported data.
4. From the Save as type list, select the type of file *.txt or *.csv.
5. Click Save.
A file that contains the exported data is created with the specified file name in the selected folder.
Import designs
When you create an import specification, part of the process is to specify an import design. The
import design defines the structure and types of the entities and links that the import wizard creates
from each row in your data.
Creating an import design has up to three stages:
1. If you are working with a classic specification, you can use the Select Design page of the wizard to
select a representation of the relationships between the items you are importing. Otherwise, the
wizard moves straight to the Assign Columns page.
2. The import design appears on the Assign Columns page as a small entity and link chart. You can
edit the chart to select which types of entity and link are created in the chart when you import your
data.
3. The Assign Columns page is also where you provide the instructions that govern how values in the
incoming data become the property values of entities and links.
Note: For a schema-aligned specification, the available entities, links, and properties all depend
on the i2 Analyze schema on the server that you connected to most recently.
Procedure
1. To add an entity, click Add New Entity above the import design. Within the import design, the
mouse pointer becomes an empty circle; click the left mouse button to add an entity.
2. To add a link, click Add New Link above the import design. Within the import design, drag a link
between two entities.
Procedure
To set a type:
1. In the import design, click an entity or a link.
2. In the table to the right of the import design, select a type from the Type list.
The types in the list depend on the import specification. For a classic specification, they match the
types in the Analyst's Notebook template. For a specification that is aligned with an i2 Analyze
schema, they match the entity and link types in that schema.
Note: In the aligned case, any types that are invalid because of link end constraints have a red
cross next to them.
When you select a type, the import design displays the entity or link type name. If you selected an
entity type, the entity type icon is displayed in the import design.
Procedure
To configure how a property value is set from incoming data:
1. In the import design, click an entity or a link.
The record or item properties are displayed to the right of the import design.
2. Drag a column from the preview table at the top of the wizard to a cell in the Value column of the
property list.
The column name is displayed in the property table within square brackets. For example,
[Duration].
3. To assign more than one column to a property value, hold the Shift key and drag a second column
to the cell in the Value column of the property table. The second column is also assigned to the
property value, and is separated from the first column by a space.
For example, [First Name] [Surname].
Note: You can use this technique to assign multiple columns to single-line text, multiple-line text,
or 'suggested from' properties (lists that you can type other values into). To achieve the same
effect for other properties, use column actions to create columns that contain multiple values
before you reach this point.
4. If you are working with a classic specification, then you must assign a column to the "Identity"
property of an entity that uniquely identifies it on the chart.
Depending on the data, you might use the number of a telephone, or the license place of a vehicle,
for example.
5. Choose what action to take when the import wizard encounters a blank value in a column.
a) Select the property name, and then click the browse button that appears next to the value.
b) In the window that opens, choose whether to replace a blank value with a fixed value.
c) If you are working with a classic specification, and the blank value is for the identity of an
entity, choose one of the following options:
• Do not create the entity
• Create the entity with a blank identity
• Create the entity and set its identity to, then enter a value.
Procedure
To set the direction of an imported link:
1. Select a link in the import design.
The property table is displayed to the right of the import design and contains the Direction
property.
Procedure
To set link strength:
1. Select a link in the import design.
The property table is displayed to the right of the import design and contains the Strength
property. Unless previously modified, the property has a default value of Confirmed.
2. In the property table, select the Strength row, and then click the browse button that appears.
The Edit window opens.
3. To assign the same strength to each link that is imported as a result of the design, click Strength
and select a link strength from the list.
4. To assign strengths from values in the incoming data:
a) Click Single column, and select the column that contains the data that determines link
strength.
b) Optional: Select the Replace blank value with check box, and select a strength to assign when
no values are present in the data.
c) Click OK.
Procedure
To set a grade:
1. Select an item in the import design.
Procedure
As soon as you assign an incoming column to a date, time, or date & time property in the design, the
import wizard gains a Date & Time Format page. To set a date and time format:
1. Click a column in the table at the top of the page.
If the values in the column do not match the selected format, a yellow triangle is displayed in the
column header. A yellow triangle is also displayed next to any values for which the format is
invalid.
2. Select a predefined date and time format, or enter a custom format:
a) To use a predefined date and time format, click a format in the list.
Each row contains an example of the format in use, and a description. If the format is not valid
for the data in the column, a warning is displayed in the table.
Note: A valid date format might not be the correct date format. For example, 10 December
2013 can be expressed as 10/12/2013 or 12/10/2013. If your import data expresses 10
December 2013 as 10/12/2013 within a column, the mm/dd/yyyy date format is valid for that
column, but is not correct.
If you think you have the correct format but the yellow triangle still appears, check the values in
your date and time columns for extra characters such as spaces. You can remove unwanted
characters by using Trim Characters on the Column Actions page.
b) To use a custom format, enter a date and time format in the Custom format field.
An example date and time value with that format is displayed in the adjacent field. If the format
is not valid for the data in the column, a warning is displayed in the table.
Results
Date and time properties in the import design can now receive values from the incoming data
correctly.
Matching records
When you are creating or editing an import specification that is aligned with an i2 Analyze schema,
you can tell the import wizard to use system-wide rules to identify duplicate records in the incoming
data, on your chart, and in the Information Store. You can also use local matching to identify duplicate
entities and links in the data and on your chart.
Procedure
• To define record matching that uses system-wide rules:
a) Click System Matching. The wizard compares the property values that you assigned in Assign
Columns to the system rules. If the system rules require further assignments, a flag appears
next to System Matching. Hover your mouse pointer over the flag to see a detailed message
about your import. You can proceed with your import without assigning the required property
values, although revisiting your import design at this stage might improve the quality of your
record matching.
For example, in your import design you might have assigned a property value of Last Name to a
Person entity. If you have a system rule that looks for a match on Last Name, this identifies
matches in your import data and in the match locations you select. However, if the system rule
specifies Last Name and Passport Number, the wizard tells you which value is not assigned.
You can return to Assign Columns and add more property values to satisfy the requirements of
the system rules before you run the import.
b) Select the locations to include in record matching.
The import process uses the system-wide rules to identify matches in the incoming data,
Information Store records, and your target chart.
Note: System matching is used for entity records. If you want to match link records, you should
define these using local matching.
• To match records locally:
Results
When you run the import, a progress window is displayed. If matches are found, the import is paused.
Another window is displayed that shows you the number of matches between the imported data and
records from the locations you selected. This information is to help you understand what is happening
to your records during the import process and what other actions you might take. For example, if your
import data matches with multiple records in the Information Store, you might want to use the Get
Matches function to unite them.
What to do next
Click Continue to proceed with the import. When the import completes, a message is displayed to
show timing details and the numbers of entity and link records that were created or replaced.
Alternatively, you can click Cancel to end the import and return to the chart.
Procedure
1. On the Import Details page, select Link occurrences removed to open the Link Occurrence
Options window.
2. Select a check box and enter values in the corresponding boxes, as follows:
Option Description
Remove links with Connections are not created (and their links are not imported) when
occurrences below they would contain fewer than the specified number of links. The value
must be greater than or equal to one.
Remove links with Connections are not created (and their links are not imported) when
occurrences above they would contain more than the specified number of links. The value
must be greater than or equal to zero.
Remove single Entities are not imported when they have only one link within the
connections incoming data. Both the entity and the link are discarded.
Important: Use the Link Occurrence Options with caution. In removing entities and links during
the import process, you might discard information that is crucial to the analysis.
3. Click OK.
Your changes are confirmed on the Import Details page. You can change this option before you
run the import.
Procedure
To set the layout of the chart that contains new items:
1. On the Import Details page, click Change in Layout imported items using.
2. Double-click a layout in the Available Layouts list. The layout is added to the Layouts Applied List.
3. Set the properties for the selected layout. The available properties vary from layout to layout.
Procedure
The procedure for providing default values is different for single-value and multi-value dimensions:
1. In the Security for imported records section of the Import Details page, choose the security
dimension for which you want to change the default value.
2. For a multi-value dimension, click the button to display the edit window, select all the dimension
values to use, and then click OK.
3. For a single-value dimension, use the drop-down list to select a default security value.
Procedure
To save a new import specification, or to save changes to an existing specification:
• On any page of the Edit Import Specification window, click Save.
If you are creating an import specification, the application prompts for a name.
To create an import specification from one that is already open for editing:
• On any page of the Edit Import Specification window, click the arrow next to Save, and then click
Save As.
The application prompts for a name for the new specification, and then opens the duplicate for
editing.
Option Description
Edit Open the import specification for editing.
Rename Edit the name of the import specification that you (and potentially
other users) see in the Saved Specifications window.
Duplicate Create a duplicate of the import specification. The new
specification has the same name as the original, with the prefix
"Copy of ".
Copy to Workgroup If the import specification is in the "local" location, copy it to the
Folder "workgroup" location.
Show data file in Open Windows Explorer at the location of the data file that is
Explorer stored in the import specification.
Show specification in Open Windows Explorer at the location of the import specification.
Explorer
Delete Delete the import specification.
By default, the Import Specifications window displays specifications that are relevant to your
context. In Analyst's Notebook, you see classic specifications. In Analyst's Notebook Premium with
Opal services, you see schema-aligned specifications. However, you can also work with classic
specifications in Analyst's Notebook Premium:
• In the Options pane of the Import Specifications window, select Show classic specifications.
Any classic specifications in the "local" or "workgroup" locations are added to the list.
Procedure
1. Create import specifications by using the standard import wizard.
2. Create a batch file that references your import specifications.
3. From a command prompt, run the batch file.
Procedure
• To import XML data in Analyst's Notebook Exchange, you specify the location of the source file and
some processing instructions.
a) Click the Home tab, and then click Import > Import from Analyst's Notebook Exchange File.
Note: Despite its name, this command supports importing data in any XML format, not only
Analyst's Notebook Exchange files.
b) In the Select Data File to Import window, locate the file that contains your data, and then click
Open.
c) In the Import XML window, configure the behavior of the XML import wizard:
Apply Style Sheet If you are not importing an Analyst's Notebook Exchange (.anx) file,
select this option and specify an XSLT style sheet. The style sheet must
transform the XML so that it validates against the Analyst's Notebook
schema.
Create New Chart Select this option to import the data into a new chart instead of the
current chart.
Layout Imported Select this option to apply a peacock layout to the imported data. Any
Items items that are already on the chart are not affected.
Enable Enhanced Select this option to perform more careful validation before the data is
Validation Rules imported.
d) Click OK to import the data from the XML file that you selected.
When the import process finishes, the application displays a message that indicates the success or
failure of the process. If the import fails, the message includes the location of a log file.
Note: Data imports from XML files cannot be used to create records in i2 Analyze.
Procedure
In Analyst's Notebook Premium, the External Searches window contains everything that you need in
order to understand, configure, and run the queries that search external data sources.
1. On the Home tab of the ribbon, click External Searches.
The External Searches window opens, and the queries that your system administrator defined are
listed on the Queries page.
2. Optional: Use the Filter these queries field to enter text that filters the list of queries by name.
3. Click a query to select it and display more information about it.
The pane on the right of the Queries page lists the actions that you can perform with the selected
query. The same pane also describes what types of information the query can return, indicates
Results
After the query runs, the External Searches window gains a Results view that contains the search
results. From here, you can select results and copy them to the chart surface, or you can refine your
search by filtering the results.
Procedure
1. Follow the general procedure for searching external sources as far as Step 4: Open the External
Searches window, select a query, and click Open.
When a parameterized query opens, the External Searches window gains a new tab that contains
a Conditions view.
The Conditions view can be different for every query. Its appearance depends on how your system
administrator configured it. The main area of the view contains fields where you provide the condition
values that customize the query when it runs.
2. Enter a value for every mandatory field, and as many of the other fields as you need.
Mandatory fields are initially colored red, and change color to indicate that your entry meets the
rules for the value. If your entry is not valid, a message beneath the field advises you what change
you need to make.
3. Click Run to start the query.
Results
After the query runs, the tab in the External Searches window that has the Conditions view gains a
Results view that contains the search results. From here, you can select results and copy them to the
chart surface, or you can refine your search by filtering the results.
You can also switch between the Results view and the Conditions view by using the directional
arrows on the information bar. In this way, you can rerun the query with modified parameters without
returning to the Queries list.
Procedure
1. Follow the general procedure for searching external sources as far as Step 3: Open the External
Searches window and select a query.
When a query supports or requires seeds, the pane on the right of the Queries page describes what
you must select:
Seed type constraints
The types of seeds that the query uses, and the number of each type.
Seed count limits
Lower and upper boundaries (if any) on the total number of seeds.
Seed data sources
The data sources from which seeds must originate.
If one of these headings is not in the list, then the selected query has no requirements of that kind.
2. Select chart items that meet the requirements of the seeded query.
When your selection satisfies the query, the list changes in the Queries tab. A dynamic list of
seeded queries appears above the main list. Any query whose requirements are met by the
current chart selection appears in the new list.
3. Select the query in the new list, and then click Open or Copy to chart, depending on whether the
seeded query also supports or requires parameters.
Results
After this point, the seeded query behaves just like any other query against an external data source.
You can specify parameters or browse search results, and then add results to the chart or filter them
further.
Procedure
1. On the Home tab of the ribbon, click External Searches and run your search query.
2. Select the records you want to copy to the chart.
The Copying records to charts message is displayed. If matches are found, the Matches Found
Dialog is displayed.
3. The number of system governed and analyst governed records with matches are reported in the
Matches Found Dialog. You can choose to cancel the operation or continue.
Results
If you choose to copy the matched records found in your external search, your charts records are
updated with data from matching analyst governed records. System governed records are copied to
the chart.
Procedure
1. If you do not already know them, find out the address (URL) of the Information Store and your
login details (user name and password) from your system administrator.
2. Click Change Connection Details in the upper-right corner of the application window.
3. Enter the URL of the Information Store and click Connect.
4. If you are prompted, enter your user name and password and click Log in.
Note: When you are logged in, if you don't do anything, then after a short time you might be
automatically logged out.
Key concepts
When you connect to an Information Store from Analyst's Notebook Premium, the application
undergoes some changes to its appearance and its behavior. The user interface gains options that
help you to interact with the Information Store, while some other features become unavailable.
The data in an Information Store is contained in records. When you connect to an Information Store
and use Analyst's Notebook Premium to visualize its data, the chart items that you create contain
records copied from the store. When you use Analyst's Notebook Premium to create records, you can
upload them to the Information Store and share their information with other authorized people.
Record bar
The first and most obvious change to the Analyst's Notebook user interface when you connect to
an Information Store is the record bar that appears below the ribbon. The buttons in the record
bar display information about the numbers of records in the chart that have different types and
states. Clicking the buttons selects all the chart items that contain records that have a particular
type or state, so that you can work with them quickly.
• Entity records
• Link records
• New records
• Edited records
• Records with changes available
• Edited records with changes available
• Orphaned records
Any links that were connected to the original entities are retained on the merged entity:
Each link is connected to the record in the entity to which it was originally connected.
In the Information Store, link records connect two entity records. Therefore, when you create an i2
Analyze link between two i2 Analyze entities on your chart, the link connects to a particular record in
each entity.
Lead records
When a chart item contains multiple i2 Analyze records, one of the records must be assigned as the
lead record. The lead record is used in the following ways:
• Analyst's Notebook Premium bases the label that is displayed on the chart surface for an item on
information in the lead record.
diamond . If you need to, you can change the lead record assignment before you create a link.
Changing the lead record can also cause the label and the icon on the chart to change.
Sharing information
When you work with the Information Store, you can share information and assertions with other
analysts and find out whether other analysts have findings that are of interest to you. You can share
information with other analysts by uploading new or edited records and notes to the Information
Store.
There are many reasons to share your information. For example:
• To share records that you have created
• To update shared information with new intelligence
• To add notes to new or existing records that provide more insight about an item, or provide
operational information
However, there are also times when you might not want to share or update information. For example,
in evidential situations, you might not be allowed (or it might be inadvisable) to share your proposals
for further investigation before they are confirmed.
The security settings and processes in your organization might constrain which records you can and
cannot share.
" " To search for an exact word or phrase, enclose it in double quotation marks. For
example, "John Doe" matches the phrase John Doe but not the word John.
" "~integ To search for terms that are within a specified distance from each other, enclose
er two or more terms in double quotation marks followed by tilde (~) and an integer
value. The integer specifies the distance limit, where the distance is the number of
words that can be between each pair of terms. For example, "John Doe"~1
matches John James Doe but not John James Simon Doe.
To match terms in a different order, changing the order of the terms counts as a
distance of 2 towards the total distance value. For example, "Doe John"~1 does
not match John James Doe, but "Doe John"~3 does.
To return a match, each word in the search term must be within the specified
distance of any adjacent words in the search term.
? Matches a single unknown character. For example, J?n matches Jan and Jon but
not Jean.
* Matches zero or more unknown characters. For example, J*n matches Jn, Jan,
Jon, and Jean.
Logical operators
By default, when you search for multiple words, the results must match all the words that you
enter. For example, John Doe (no double quotation marks) searches for items that contain words
like John and words like Doe. You can change the search behavior and build more complicated
searches by using the following logical operators:
AND Searches for records that contain all words or phrases. For example, Offense AND
"John Doe" searches for records that contain words like Offense and also contain the
exact phrase John Doe.
Search scope
You can use the Advanced option to specify where term matches are found.
Procedure
1. On the Home tab of the ribbon, in the Search Information Store group, click Quick Search.
The Information Store Quick Search window opens.
2. Type the terms that you want to search for, and press Enter.
When you type the search terms, Analyst's Notebook Premium explains how it interprets the
search expression. For example, it shows the locations of implicit AND operators, and inserts
parentheses to make operator precedence explicit.
When you press Enter, Analyst's Notebook Premium searches the Information Store, and displays
the results.
3. After you receive results, you can refine the search terms or use filtering to reduce the result set.
To filter results based on record types, property values, or metadata, select a type and then
choose one or more properties or metadata categories to filter by.
For example, a search for the word Ford might display results for people and cars. Select the
Person type to display results for people, and then select properties that are related to the
person's name to filter out everything except people whose name contains a word like Ford.
Each filter is displayed at the top of the window.
Note: To remove a filter, delete it by clicking the cross next to the filter.
What to do next
When the search results are displayed, you can copy one or more of the records that they represent to
your chart.
Structured searching
You can use Visual Query to search for records in the Information Store based on the values of
specific properties and on their relationships to other records. The records that you find depend on
the structure of the queries that you create.
Two steps are involved in building a Visual Query:
• Define the structure of the query to indicate the types and relationships of the records that you are
interested in.
• Add conditions to the items in the structure to define some of the values in the records that you
want to find.
Procedure
1. On the Home tab of the ribbon, in the Search Information Store group, click Visual Query.
The Information Store Visual Query window opens. If you have used the Visual Query feature
before, there might be a list of saved queries in the window.
2. Open a saved query, or click New query to create one.
Analyst's Notebook opens a new tab in the Information Store Visual Query window.
For a new query, the Edit query structure window opens immediately. For a saved query, you can
select the two query entities that you want to link, then click the Add Link button , and select
a link type.
5. Optional: To add a direction to a query link, select the link, then click the Set direction button
.
You can set a count on only one item in the query structure. If you set a count on a second item,
the first one is removed. Set the value on the count flag later, when you add conditions.
7. By default, the first item you add to the query structure is given the output flag. To give a different
item in the query structure the output flag, select the item, then click the Set as Output button
.
The output flag is removed from the original item.
8. Click Done.
After you click Done, you can edit the query structure at any time by clicking the Edit structure
button .
What to do next
After you define the query structure, add conditions to the items in the structure, and then run the
query.
Related concepts
Visual Query conditions
You can constrain a search according to the properties of records in the Information Store by adding
conditions to the Visual Query. You can add conditions to any of the items in a query structure.
Related tasks
Adding conditions to a Visual Query
? Matches a single unknown character. For example, J?n matches Jan and Jon but not Jean.
* Matches zero or more unknown characters. For example, J*n matches Jn, Jan, Jon, and Jean.
Multiple values
By default, each line in the value of a condition is treated as a single value, including any spaces and
wildcards. If the property value is a string and you select 'Is exactly' or 'Is not' as the operator, you
can enter several values. You can include more than one value by entering each value on a separate
line. If a text file contains the values that you want to use, you can import values from the file. Any file
that you use must have the file type .txt and must contain row-separated values.
Combining conditions
After you create one condition, you can add another that uses the same property type, or create
another on a different property type or a different query item.
If you specify conditions on different items in a query structure, the conditions on the different items
must all be met (AND). For example, if the structure of your query contains a Person entity that is
linked to a Vehicle entity, you might specify the following conditions:
• On the Person entity, Family Name is exactly Young.
• On the Vehicle entity, License Plate contains 123.
The query results contain people with the family name Young who are linked to a vehicle, which
contains 123 in the license plate.
Typically, when you add conditions on different property types of the same query item, all of the
conditions must be met (AND). However, it can depend on the property type.
If you add more than one condition on a single property type, how the conditions are combined
depends on the property type, the operators that you choose, and the order in which you add the
conditions. After you add a condition, the query indicates how the conditions will be combined (AND
or OR).
If you specify multiple values for a single condition, at least one of the values must be met (OR).
Procedure
1. The Query conditions pane of a new or open query in the Information Store Visual Query window
contains a list of all the items in the query structure. Click the plus icon next to the item that
you want to add the condition to.
The Add or remove conditions window opens.
2. Select the property type or date and time aspect for which you want to add conditions and click
OK.
3. For each property type, select the operator and enter or select the value. For some property types
and operators, you can enter multiple values. To enter multiple values:
Procedure
To save a new query, or to save an open query with a new name:
• On the same page as the Query structure pane, click Save as.
The Query details window appears.
• Enter a name and a description for the new Visual Query.
• If you want this query to generate alerts, select the check box.
You can change your decision later through the Alerts setting on the Saved queries tab.
• Click Save.
To save changes to a query that you opened from the list:
• On the same page as the Query structure pane, click Save.
Analyst's Notebook updates the saved Visual Query.
Results
Any Visual Query that you save is added or updated in the Saved queries list, and becomes available
for you to use whenever you log in to the connected i2 Analyze server. If you also enabled alerts, and
data that matches the query changes, then alerts appear in the Information Store Alerts list.
Procedure
• To create a search area using Maps:
a) In the Query conditions pane of your Visual Query, click the plus icon next to the entity you
want to add the condition to.
The Add or remove condition window opens.
b) Select a Geographic Location property and click OK.
Expanding entities
When chart entities contain copies of records from the Information Store, you can expand to find
related records, and add items that contain copies of those records to the chart.
Procedure
• To expand all selected entities that contain records:
a) On the chart, select the entities that you want to expand.
b) Click the Home tab of the ribbon, and then in the Search Information Store group, click
Expand.
Links and connected entities are added to the chart.
What to do next
You can now use the Analyst's Notebook tools to analyze the items that contain the copied records.
Procedure
To expand with conditions:
1. On the chart, select the entities that you want to expand.
2. Click the Home tab of the ribbon, and then in the Search Information Store group, click Expand
with Conditions.
The Information Store Expand with Conditions window opens.
3. To choose the type of filtering to apply, click Expand by type in the window header and
select entity type, link type, or both.
A list of record types that are connected to the selected entities is displayed. If a large amount of
connected records are found, you are asked whether you want to Display the list.
4. Select the record types and click Copy to Chart.
Note: To expand by a single type, you can hover over the type and click Copy to Chart.
A summary of records that were copied (or marked to show that changes are available) is
displayed in the Expand with Conditions window. The relevant links and entities are added to the
chart. These entities and links are selected, together with any relevant existing entities and links
on the chart. You can click a row in the summary to change the selection. For example, to select
only the originally selected entities, click the Seeds row in the summary.
5. To close the Expand with Conditions window, you can do one of the following:
• Click Finish. The Expand with Conditions window is reset for next time that you expand.
• Click the Expand with Conditions ribbon button. Next time that you expand, the window opens
on the last page that you used.
To continue expanding, select entities from the summary and click Expand Again.
Procedure
• To find records that match with the Information Store:
a) On the chart, select the entities that you want to check for matches.
b) Click the Home tab of the ribbon, and then in the Search Information Store group, click Get
Matches.
The Matching Records Found dialog displays the match results.
c) Click Continue to unite the matched records on the chart, or click Cancel to return to the chart.
If you decide not to proceed with getting matched records, the chart records with matches are
not updated but are selected.
Note: It is possible for links between records to be lost, for example if an Information Store
record matched with two linked chart records. Although this situation is unlikely, you can use
Find Matching Records to resolve potential duplication before running Get Matches.
Procedure
1. If the search results contain many records, you can filter the results by clicking one or more listed
properties or types.
2. In the Information Store Quick Search window or the Information Store Visual Query window,
select the check boxes next to the records that you want to chart. To select them all, select the
check box at the top of the list.
3. Click Copy to Chart.
The Copy to chart pane opens. A list of open charts is displayed with the current chart selected.
Charting schemes
Charting schemes define what items that contain i2 Analyze records look like when they appear on
your chart. A charting scheme maps the properties of records to properties on the chart item.
For example, a Date of Birth property might be mapped to a chart item, or Given Name and Surname
properties might be mapped to a chart item label.
Specifying which attribute classes and labels to populate from different properties defines how those
properties are displayed on the chart item. In addition, by using connection multiplicity, you can
display multiple links between two entities as a single link, but still retain the information from the
individual records in the chart item.
You can change the charting scheme that is associated with a chart at any time.
Procedure
In the bar below the ribbon, select the required charting scheme from the Charting scheme list.
Note: If the type of display that you require is not available in the list, you can request changes to a
charting scheme, or new charting schemes, by contacting your administrator.
Procedure
1. Ensure that the Information Store palette is displayed. This palette contains the entity types that
correspond to the types in your Information Store.
If the Insert from Palette pane is not visible, click the Home tab, and then click Insert from
Palette. If there is more than one palette, you can select the Information Store palette from the
palettes list at the top of the entity section of the pane.
2. Optional: To create an entity that has a representation other than icon, select the representation at
the top of the Insert from Palette pane.
Note: You cannot create an i2 Analyze entity with the OLE Object entity representation.
3. Drag the entity type that you want to create from the palette onto the chart.
The Record Inspector displays the record that you created. The property types that are initially
displayed correspond to the following property types from the Information Store:
• Properties whose values are used in the record label
• Mandatory properties
4. Enter values on the Properties page of the Record Inspector.
You can enter values for properties that are not listed by using the plus button on the Properties
page. As you create further entities, the Record Inspector remembers which properties you
typically use.
What to do next
When you save your chart, the i2 Analyze entity that you created is saved.
When you are ready to share information, you can upload the records that you create to the
Information Store.
Related tasks
Uploading records to the Information Store
Procedure
1. Ensure that the Information Store palette is displayed. This palette contains the link types that
correspond to the types in your Information Store.
If the Insert from Palette pane is not visible, click the Home tab, and then click Insert from
Palette. If there is more than one palette, you can select the Information Store palette from the
palettes list at the top of the link section of the pane.
2. If either of the entities that you want to connect contains multiple i2 Analyze records, ensure that
the appropriate record is assigned as the lead record in each entity before you create your link. To
assign a new lead record:
a) Double-click the entity to display its records in the Record Inspector.
b) Select the record to assign as the lead record in the list view.
What to do next
When you save your chart, the i2 Analyze link that you created is saved.
When you are ready to share information, you can upload the records that you create to the
Information Store.
Related concepts
Multiple records in one chart item
Chart items in Analyst's Notebook Premium can contain multiple i2 Analyze records. If you merge two
entities that contain records, the result is a single entity that contains two records. If there are several
link records that connect the same two entities on the chart, you can choose to represent them as a
single link item.
Related tasks
Uploading records to the Information Store
If you have access to the feature, you can upload new or edited records to the Information Store. You
can upload individual records, or all the records in the currently selected items.
Procedure
1. Click the chart item for which you want to view or edit i2 Analyze records.
If the Record Inspector is not already open, double-click the chart item to open it. The records that
the item contains are displayed.
2. If the item contains multiple records, one of the records is assigned as the lead record. To assign a
different lead record:
You can choose to enter values for properties that are not listed by using the plus button on the
Properties page to change which properties are listed. If you remove a property from the property
list, any value that is contained in the property is deleted from the record. If you upload your edits
to the Information Store, deleted values are also deleted in the Information Store.
Note: You cannot remove mandatory properties or any property that makes up the label.
Procedure
To add or edit a note:
1. Ensure that the record that you want to edit is displayed in the page view of the Record Inspector.
2. Click the Notes tab.
3. If the record has no notes, you can create one by typing into the empty field.
4. If the record already has notes, you can click New to add a note, or click an existing note to edit it.
The note is added to (or updated in) the record in the chart item, along with information about who
added or edited the note, and when it was added or edited.
5. To delete a note, select Actions ( ) next to the note, and then click Delete.
Procedure
To edit the security settings of an i2 Analyze record, follow these steps:
1. Ensure that the record that you want to edit is displayed in the page view of the Record Inspector.
2. Click the Details tab to display details about the record.
In the Security section, you can see the current security dimension values for the record. If you
can edit these values, Edit buttons and drop-down lists are visible.
3. Select the security dimension that contains the values that you want to edit.
4. Select the dimension values to apply to the record.
What to do next
When you complete your edits, upload the affected records to the Information Store. For more
information about uploading records, see “Uploading records to the Information Store” on page 92.
Procedure
1. Select the chart items whose records you want to update.
2. On the Home tab of the ribbon, in the Work with Records group, click Get Changes.
The Get Changes window opens with a summary of the records that contain updated versions in
the Information Store.
Important: If you edited any of the records that have changes in the Information Store, the
window provides the opportunity to copy information from those records to the clipboard. When
you accept the changes, your edits are overwritten and you must reapply them afterward.
3. To accept the changes, click Get Changes.
What to do next
If you copied any of your edits to the clipboard, you can retrieve that information to make your
changes again to the updated records in your chart.
Procedure
1. Select the chart items whose records you want to upload.
2. On the Home tab of the ribbon, in the Work with Records group, click Upload Records.
The Upload Records window opens with details of how many records will be uploaded, any
records that cannot be uploaded, and reasons why.
3. To upload the records that can be uploaded, click Upload.
Procedure
To work with the source references of an i2 Analyze record:
1. Select the record and double-click to open the Record Inspector.
2. Click the Details tab to display details about the record.
3. In the Source references section, you can see any current source references. You can edit a source
reference if the Actions button is available. You can also add a new source reference by
What to do next
Upload the record to the Information Store.
Procedure
The first part of the process involves choosing the records that you want to delete, and deciding how
you want to delete them.
1. On the current Analyst's Notebook chart, select the items that contain copies of the records that
you want to delete from the Information Store.
Analyst's Notebook populates the Record Inspector with information about all the records in the
selected items.
2. On the Home tab of the ribbon, in the Work with Records group, click Get Changes.
The records in the chart must reflect the latest versions of the records that you want to delete.
3. If you want to delete records one at a time, select the Page view in the Record Inspector and find
the first record to delete. If you want to delete all the selected records, select the List view.
4. In the Record Inspector, open the More actions menu and select Delete from Information Store
(or Delete all from Information Store).
The Delete Records from Information Store window opens.
The window contains a summary of the records that you selected and whether you can delete them.
Common reasons why you might not be able to delete records from the Information Store include:
New records
The records have not been uploaded to the Information Store, so it is not possible to delete them
from it.
Blocked records
The records in the chart do not reflect changes that have taken place in the Information Store.
Results
When you close the window, Analyst's Notebook Premium updates the state of any of the selected
records that remain on the chart. For example, records that were blocked from deletion are marked
as having Changes available.
If you clicked Delete permanently, then the affected records are deleted from both the Information
Store and the chart. If a deleted record was the only one in a chart item, then the item is also deleted
from the chart. If you deleted an entity record, then all its connected link records are also deleted
from the chart and the store.
Connecting to QRadar
When you start to work with i2 Offense Investigator, Analyst's Notebook starts up (if not already
running), then prompts you to connect to QRadar and log in. For example, the first time in a session
that you send offenses to Analyst's Notebook or when you try to expand offenses or IP addresses
from an existing chart.
Procedure
1. In the Connect to QRadar window, enter the URL of your QRadar application and click Connect. If
you do not already know the URL, you can copy the address from the browser of your QRadar
session.
The Log in to QRadar window opens.
2. Select the authentication method that you use to log in to QRadar. If you do not know which
authentication method to use or you do not know the authorized service token or your user name
and password, contact your system administrator.
Option Description
Token Your QRadar administrator might provide you with an authorized service
token for you to enter. In subsequent Analyst's Notebook sessions, if this
token is still valid, you are not prompted for it again.
User Name and If you log in using a user name and password, you are prompted every
Password session for these credentials.
Procedure
• To expand selected offenses to chart all IP addresses that are linked to them in QRadar:
a) On the chart, select the offenses that you want to expand.
b) Right-click one of the selected offenses and then click Expand to IP Addresses from QRadar
or if your selection also includes IP addresses, click QRadar Offenses > Expand to IP
Addresses.
Note: If you are not connected to and logged in to QRadar, you might be prompted for your
connection information and login credentials.
Links and connected IP addresses are added to the chart.
• To expand selected offenses based on source or destination IP addresses:
a) On the chart, select the offenses that you want to expand.
b) Right-click one of the selected offenses and then click Expand with Conditions to IP
Addresses from QRadar or if your selection also includes IP addresses, click QRadar Offenses
> Expand with Conditions to IP Addresses.
Note: If you are not connected to and logged in to QRadar, you might be prompted for your
connection information and login credentials.
The Expand with Conditions to IP Addresses window opens.
c) You can choose to expand based on source IP address, destination IP address, or both. If you
chose to expand based on destination IP address, you can choose whether to include local
destination IP addresses, remote destination IP addresses, or both. Select the required Expand
to IP Addresses check boxes.
d) Click Expand.
Links and connected IP addresses that meet the specified conditions are added to the chart.
Results
If the data of a previously charted item is updated in QRadar, its information on the chart is only
updated when you perform another operation that involves that item. For example, if an offense is
charted and the information about it is later updated in QRadar, then information on the charted item
is updated only if you select it and perform an Expand operation or if it is included as part of an
Expand operation from selected IP addresses.
Procedure
1. On the chart, select the IP addresses that you want to expand.
2. Right-click one of the selected IP addresses and then click Expand with Conditions to Offenses
from QRadar or if your selection also includes offenses, click QRadar IP Addresses > Expand
with Conditions to Offenses.
CAUTION: If any of the selected IP addresses are remote destination IP addresses, you
are warned that expanding them might impact the performance of your QRadar system. Be
sure that you need to expand the remote IP addresses before proceeding. Otherwise,
expand only source or local destination IP addresses.
Note: If you are not connected to and logged in to QRadar, you might be prompted for your
connection information and login credentials.
The Expand with Conditions to Offenses window opens.
3. You can choose to expand based on the date and time of events that are related to the selected IP
addresses. Select one of the options and enter the required date and time conditions.
4. Click Expand.
Links and connected offenses that meet the specified conditions are added to the chart.
Results
If the data of a previously charted item is updated in QRadar, its information on the chart is only
updated when you perform another operation that involves that item. For example, if IP addresses
are charted and the information about them is later updated in QRadar, then information on the
charted items is updated only if you select them and perform an Expand operation or if they are
included as part of an Expand operation from selected offenses.
What to do next
After you add offenses from QRadar to the chart, you can expand them to chart further IP addresses,
or use the Analyst's Notebook tools to analyze the data that they contain.
Procedure
1. Click the Home tab, and then in the Data Sources group, click Connect.
Analyst's Notebook displays commands that connect Analyst's Notebook to data sources.
2. To connect to a data source, choose an appropriate command from the list, then if prompted enter
further information such as a user name and password.
Results
Analyst's Notebook connects to the data source. Commands that are provided by the data source are
added to the Connected Sources and Item Actions menus.
If the Data Sources pane is displayed, and the data source provides access to its features through the
pane, the source is selected at the top of the pane. Features that the source provides are displayed in
the lower part of the pane.
Procedure
• To use features that are not item-specific, such as a search feature, click the Home tab, and then
in the Data Sources group, click Connected Sources.
• To use features that are item-specific, such as a feature that adds items that are related to an
existing chart item, select a chart item that originates from a connected data source, then follow
these steps:
– Click the Home tab, and then in the Data Sources group, click Item Actions.
– Right-click the selected chart item, then click the name of the data source in the menu that is
displayed.
• Some sources provide access to their features through the Data Sources pane. To access these
features, click the Home tab, and then in the Data Sources group, click Connect > Data Sources
Pane. Select the data source from the list at the top of the pane. After Analyst's Notebook
connects to the data source, the features that the source provides are displayed in the pane.
Procedure
To show the Data Records pages for an item:
1. Right-click the item on the chart and click Edit Item Properties.
2. Choose a database instance folder, and then click a data record in it.
Note: Data records are displayed only when one item is selected on the chart.
What to do next
A data source might provide the facility to view the current data about the item, in the data source.
You can see changes that were made in the data source since the item was charted.
Related concepts
Identities
An identity uniquely identifies an item on a chart or provides a unique link back to entity or link
information in a data source.
Related tasks
Removing data records
For chart items that have database identities, you can choose to remove any associated data records.
For example, if you want to clean the chart of sensitive or unwanted information.
Procedure
1. At the top of the Data Sources pane, identify the row that corresponds to the data source whose
items you want to select.
Note: Only the sources that provide access to their features through the Data Sources pane are
listed.
2. Click the Select chart items button in that row.
All chart items that originate from that data source are selected on the chart surface. You might
choose to analyze the items collectively, for example you might add them all to the Activity View.
Procedure
1. Right-click an item on the charting surface, and then select Edit Item Properties.
The Edit window opens.
2. Click Item Properties > Label & Identity.
The Database Identities list displays the name of the data sources that the item originates from,
and the database keys that identify the source records.
What to do next
Choose a data source and connect Analyst's Notebook to it, then use the features that the connected
source provides for working with its data. For example, you might add the network that the selected
item is part of to the chart.
Merging entities
It is useful to merge entities when you identify two or more entities on your chart that represent the
same real-world object. For example, you might incorporate data into your chart from a source that
uses different naming conventions or you might discover that several people on your chart are the
same person with different aliases.
Merging links
It is useful to merge links when you have several links between two entities that represent a number
of events and you want to represent them as a single link. For example, you might want to represent
several transactions from one bank account to another as a single link that indicates the total amount
that is transferred.
Text Flag When the source value begins with Y, y, T, t, or 1, then the target value is
set to YES.
Otherwise, the target value is set to NO.
Text Date & Time Only possible when the source value is a valid date and time.
Otherwise, it is not combined.
Merged data
When data is merged as a result of a paste or import, or after you use one of the merge and combine
tools, as much information as possible is retained.
The merged chart items retain the following information:
• Location on the chart.
• Chart item type, for example entity type Subscriber.
• Date, time, and ordered or controlling state.
• Semantic type assignment.
• Existing cards. The merged chart item also inherits any cards on the chart items that are merged
into it.
• Data records
The resulting labels depend on the label merge and paste rules settings that you select on the
Options > Behavior page of the Chart Properties window. For example, if the label of one vehicle
entity is ABC123 and the label of the other vehicle entity is Blue articulated truck, you can
Procedure
1. Click the Analyze tab, and then in the Find Items group, click Find Matching Entities.
The Find Matching Entities pane opens.
2. Select the type of matching you want from the list.
Option Description
Label A specialized form of entity matching that compares entity identities and labels.
Matching No two entities can have the same identity but identities can differ by letter case
or by their digits only. For example, you can search for identities that have
matching letters, excluding letter case and digits.
Smart The semantic type that is assigned to the entity is used as the basis for the
Matching match. For example, the entity types Doctor, Male, and Anonymous might all be
assigned the Person semantic type. Common properties of people such as
national identifier and date of birth are then examined to find potential matches.
Smart matching considers a broad range of criteria, including attribute instances
and database properties that are assigned the same semantic types. You specify
a threshold to indicate how strong the match must be and you can choose which
entities to include in the search.
Smart Similar to Smart Matching, however chart items are matched only against the
Matching current selection on the chart surface. For example, if the entity Danny KENT is
Against the only entity that is selected on the chart, matches are made only against
Selection Danny KENT.
Previously Search your chart to find matches that you previously found and preserved on
Linked the chart by adding a Match link between them.
Matches
You can find matching entities, ignoring any previously linked entities, as many
times as you like. When everything of interest is linked, use Previously Linked
Matches to retrieve all the resulting links from your previous searches.
3. To set up the search criteria for the type of entity matching that you select, click Setup.
4. Click Find.
Any matches are displayed in a tree view in the Matched Sets area of the Find Matching Entities
pane.
5. Use the tools in the Matched Sets area to resolve the matches.
Note: You can run Find Matching Entities as many times as you like with different options and
different setups.
Label matching
Search for entities that might represent the same real-world object based on their identities and
labels and on specified criteria. For example, you can compare letters only, digits only, or choose to
ignore characters such as spaces or tabs.
Label matching is specialized form of entity matching that does not consider criteria such as attribute
instances and database properties.
If the entity has an identity, it is used when searching for a match. If the entity does not have an
identity, for example if the entity is charted from a data source, the label is used. To override this
Smart matching
Search for entities on the charting surface that might represent the same real-world object based on
their entity types and criteria such as attribute instances and database property values.
Smart matching uses a set of predefined rules for deciding whether two entities might represent the
same real-world object. It examines entities and their associated links, and compares their property
values to produce an overall score. A score of one indicates a weak match. A score of nine indicates a
strong match. Smart matching reports the search results as sets of potential matches, which are
known as matched sets.
You can choose the strength of match that you want smart matching to report by selecting a
threshold. Depending on the threshold that you choose, you might get fewer but stronger matches, or
more but weaker matches. Typically you start to search your chart with a threshold of 9 to find the
strongest matches, and then repeat each search with lower and lower thresholds.
By changing the threshold, you can split sets of matched entities into more accurate matched sets.
For example, you might have five entities on your chart, two assigned with a Gender attribute set to
Male and three assigned with a Gender attribute set to Female. All entities have the same label but in
slightly different letter case. Selecting a threshold of 1 and 6 in different searches matches the same
entities in both searches but produces different matched sets, as shown in the table.
Note: The entity type is used for matching but it never implies any property values. In this example,
the Male and Female entities types are treated as Person entities. For smart matching to compare on
gender, gender property values must be assigned to the entities, such as a gender attribute.
Possible Match Between This link semantic type is assigned to a link when
you click the Link button in this window. It
means that the links are not then found again
when Ignore Previously Linked is selected.
Links of this semantic type are found by the
Previously Linked Matches option.
Ignored by Matching You can assign this link semantic type to any of
the links on a chart to exclude them from Find
Matching Entities. It does not prevent two items
from matching but the link is ignored as a reason
for matching. Links might otherwise be taken into
account.
You can use the number score and the card description to help you decide whether to merge
individual matches that are found. When you merge the matching entities, the details of the source
entity are retained in the merged entity for future reference.
Excluding matches
Excluding matches is useful to record that two or more entities are not duplicates, and prevents those
matches from occurring in future Find Matching Entities searches. When you exclude selected Match
links, the label on the link changes to Does Not Match.
1. Select the links on the chart fragment that you want to exclude from further Find Matching Entities
searches.
2. Click Exclude. The Match label on each selected link in the chart fragment changes to Does Not
Match. These links are then also copied to the charting surface.
Procedure
1. Click the Analyze tab, and then in the Find Items group, click Find Matching Records.
The Find Matching Records window opens.
2. Click the Rules button, next to the Find Matches button.
The Rules Overview window opens.
3. Click the New rule button.
All the entity types from your current schema are listed.
4. Choose an option from the list, for example, Person.
The New person rule window opens.
Note: You can choose the operator for property values that contain text. Some properties such as
age, height, date of birth, and weight are set to Exact match and cannot be changed.
9. Click the Refine condition button next to the arrow to make further refinements to the
conditions.
Your system administrator might have selected some default options for value handling, such as
when to ignore white space. You can change the default selection to suit your own rules. A dot
icon appears next to the Refine condition button to indicate when these refinements are
modified.
10. In the last column, you can apply a number of conditions of which at least one must be met. You
specify these conditions and refinements in the same way as you did for the previous column.
11. Click OK.
Your rule appears in the list on the Rules Overview window along with a summary of your chosen
conditions.
What to do next
You might want to create more rules before looking for matches. The Duplicate option in the Rules
Overview window is useful for creating rules to edit, rather than starting from the beginning. When
Procedure
1. Click an unresolved match set from the list in the Find Matching Records window.
The records in the set display in a table and the corresponding items are also selected on the
chart.
2. Click the box in the Unite row of all the records you want to include.
Structured search
Use Visual Search to create a structured search, which searches for data in specific properties of
chart items. You can specify multiple search criteria. For example, you can specify that you are
looking for an entity that is assigned the Person semantic type, contains 'Tom Smith' in its label, and
has 14 June 1982 for its 'Date of Birth' attribute value.
You can also specify characteristics that are described by a linked entity. For example, to find a Tom
Smith who lives at 12 Main Street, you can specify that Tom Smith must be linked to a Location entity
that has '12 Main Street' for its 'Address 1' attribute value.
You can search for relationships in your data. For example, to identify the accounts that are involved
in high value transactions, you can search for links that represent transactions of value greater than
$75000. If a matching relationship is found, you can choose to select any part of the relationship such
as the link, or a combination such as both entities and the link.
Procedure
To search for text in chart items, you specify the text to search for, how and where to search for it,
and what to do with the items that contain it:
1. Click the Analyze tab, and then in the Find Items group, click Find Text.
Tip: Alternatively you can use the keyboard shortcut: Press Ctrl+F.
2. Type the text to search for in the Find box.
Note: Searching is not case-sensitive. A search for "smith" finds "SMITH", "Smith" and "smith".
You can then select any of the following options:
Option Description
Complex Searching Define a search by using wildcards or a regular expression.
Find Items Not Matching Searches for items that do not contain the text in the Find box.
Search Cards Enables card properties for searching in the Coverage list.
Note: By default this option is selected.
Note: If you choose not to select any of these options, the same properties that are searched by
the Search pane are enabled in the Coverage list.
3. Select the item properties that you want to search in the Coverage list.
4. In the Search Area section:
a) Select whether to search for text on both entities and links, entities only, or links only
b) To include hidden chart items in the search, select the Reveal Hidden check box.
c) To apply the search only to the chart items currently selected, select the Selection Only check
box. This option is only available when items are selected on the chart.
5. In the Action area, specify the action that you want to use on the items found:
Option Description
Edit First Opens the Item Properties window for the first matching item at the page that
contains the search term. The text is highlighted. Press F3 to find any further
matches within this item and then move to the next item.
Select First Selects the first item that is found that contains the search term. Press F3 to
find the next matching item.
Select All Provides a count of the number of matches. Selects all matching items, and
clears any currently selected items that do not match the search result.
Note: Background items that contain the search term are included in the count,
but cannot be selected on the chart surface.
Add to Provides a count of the number of matches. Adds any matching items to the
Selection current selection. Only available when items are selected on the chart.
Note: Background items that contain the search term are included in the count,
but cannot be selected on the chart surface.
Remove from Provides a count of the number of matches. Removes any matching items from
Selection the current selection. Only available when items are selected on the chart.
6. Check Select Sibling Links.
This option selects all the links between two entities when one link matches.
Note: This option applies when you are using Select First, Select All, or Add to Selection as an
action.
7. Click OK to run the search.
Regular expressions
Regular expressions provide a way to search for a general pattern of text rather than a specific piece
of text. For example, you can use a regular expression to search for license plates that are based on a
partial sighting.
A regular expression is written as a sequence of characters. The syntax combines the text for which
you are searching with special characters to define the pattern.
Note: Unlike a simple search, a regular expression search is case-sensitive.
Analyst's Notebook does not support extended regular expression combinations (), \(\), \>, \<, \
{, \}, and \digit.
Wildcard characters
Wildcard characters provide a way to make your search for text more general by standing in for
unknown characters. Wildcard characters can match any character.
Structured search
You can create a structured search, which searches for data in specific properties of chart items. You
can find entities or discover relationships.
Procedure
To create a structured search:
1. Click the Analyze tab, and then in the Find Items group, click Visual Search.
2. Select the type of search:
Option Description
Single Entity Searches for data in entities only.
Linked Entities Searches for data in entities and links.
3. To select the item types or semantic types to search for, click each part of the search structure
then select an entry from the Type list.
You can choose from the following options:
• To search for chart items that have any item type, select (any).
• To search for items that have an item type from a specific palette, select (is member of) and
then select a palette from the Palette list.
• To search for items that have a specific semantic type, select (semantic types), select a type of
match from the list, then click Browse to select a semantic type. The Semantic Types list
contains semantic types that are used on the chart.
• To search for items that have a specific item type, select the item type from the Type list. The list
contains item types that are used on the chart.
4. Optional: For each part of the structure, you can specify a search condition in each of the Identity/
Label, Date & Time, and Attribute Class areas. To satisfy the query, an item must satisfy all the
conditions.
5. To specify a link direction in a search for linked entities, click the link in the structure, then select a
direction from the Direction list.
6. Optional: If items are selected on the charting surface, to restrict the search scope to all selected
items or all unselected items select the appropriate option from the Search Items list.
7. To choose what Analyst's Notebook does with the items that form the search results, select an
option from the Matched Items list. If items are selected on the charting surface, you can add the
search results to the selection, or clear the selection of items in the search results. In any
scenario, you can replace the selection with the search results.
Tip: If your search is for linked entities, you can select whether the Matched Items action applies
to all search results, or only the items that match specific parts of the structure. Select the
appropriate check boxes in the Apply To area. For example, if you are searching for people who
own vehicles, you can choose to select only the people in the search results.
8. To include hidden chart items in the search and reveal them as part of the operation, select Reveal
Hidden.
9. Click OK.
Analyst's Notebook runs the search.
Exclusions
You can exclude specific types of entity and link, and specific entities, from a search for a connecting
network. Use exclusions to configure or refine the search, and to test hypotheses.
To configure or refine the search, you might add exclusions in the following scenarios:
• A chart might contain telephone call and associate links between people. To discover whether a
network of communication joins several people, you can exclude the Associate link type. You can
exclude an item type at any time.
• You can exclude specific people that you know are not involved in an incident that you are
investigating.
• You might know that several people are employed by the same company. To avoid this known
association and search for an alternative network that connects the people, you can exclude the
company.
You can test hypotheses such as whether freezing a specific bank account prevents the movement of
funds between several other accounts of interest. After Analyst's Notebook identifies a connecting
network, you can exclude intermediate entities that you suspect might play a central role, and then
search again. The next search indicates whether an alternative network can join the entities of
interest.
You can exclude a specific entity only after Analyst's Notebook identifies it as an intermediate entity
in a connecting network.
Related tasks
Configuring and running a search
To configure a search for a connecting network, add required entities and set up item type exclusions
if required. The search results indicate whether a connecting network exists.
Refining the search
Procedure
1. Click the Analyze tab, and then in the Find Networks group, click Find Connecting Network.
The Find Connecting Network pane opens.
2. To add entities to the search, select the entities on the charting surface. Then, in the Find
Connecting Network pane, click Add Selected Entities.
3. To exclude item types from the search:
a) In the Exclusions area, click Change.
The Change Exclusions window opens.
b) Select the entity types and link types to exclude, and then click OK.
The Exclusions area summarizes the exclusions.
4. Click Find Network.
Results
The Network entities list displays the required and intermediate entities that form the search result.
The intermediate entities are displayed in bold.
If the result consists of a single network that connects all the required entities, it is selected on the
charting surface and Analyst's Notebook fits it to the window.
If the result consists of smaller networks and unconnected entities, then the Network entities list
separates each of these elements with a horizontal line. Every network and unconnected entity in the
result is selected on the charting surface and Analyst's Notebook fits the result to the window.
To fit a specific network to the window, click a member of that network in the Network entities list.
Tip: A network might be obscured if the chart contains a lot of data, or the entities in the network are
far apart on the chart surface. To make the network clearer, select the network, copy it to a new chart,
then apply a suitable layout.
Related concepts
Exclusions
You can exclude specific types of entity and link, and specific entities, from a search for a connecting
network. Use exclusions to configure or refine the search, and to test hypotheses.
Search process
To find a connecting network, Analyst's Notebook combines the shortest paths between pairs of
required entities until a connecting network is produced.
Process
When you search for a connecting network, Analyst's Notebook finds the shortest paths between
pairs of required entities. Then, Analyst's Notebook gives each path a value. Direct links between
required entities have maximum value. The value of an indirect path is determined by the following
characteristics:
Example
The following diagram depicts a connecting network on a chart surface. Required entities are colored
red. Intermediate entities, and links in the connecting network, are colored blue. All other items are
not part of the connecting network.
The chart contains two shortest paths between entity 1 and entity 3. The path in the connecting
network contains an intermediate entity that is shared with the path between entity 2 and entity 3.
Entity 3 and entity 4 are joined by their direct link.
Procedure
1. In the Exclusions area, click Change.
The Change Exclusions window opens.
2. To exclude item types, select the entity types and link types to exclude.
3. To exclude specific entities, select entities in the Specific entities list.
Procedure
1. In the Network entities list, click a member of the network that you want to format.
2. To format with the current settings, in the Find Connecting Network pane, click Format Network.
3. To configure formatting settings then format the network:
a) In the Find Connecting Network pane, click Options. The Formatting Options window opens.
b) Modify the settings.
c) To apply the settings to the network, click Format Network.
d) Click OK. The settings are saved and the Formatting Options window closes.
Tip: If the search result consists of smaller networks and unconnected entities, you can apply
different formatting to each of these elements. Click another element in the Network entities
list, then click Options to modify formatting options and format the element.
Results
The network is formatted.
To later restore the network to its original formatting, in the Find Connecting Network pane, click a
member of the network, and then click Undo Formatting.
Procedure
1. Select an origin item first, and then select a destination item on the chart.
2. Click the Analyze tab, and then in the Find Networks group, click Find Path.
The Find Path window opens.
3. Click the General tab of the Find Path window and specify the general criteria for finding a path
between the two selected items.
4. Optional: To specify date and time criteria when you search for a path:
a) Click the Date and Time tab of the Find Path window.
b) Select the Follow Date and Time check box and specify the required criteria.
5. Click OK to search for a path between the two selected items.
Note: The OK button is displayed only when exactly two items are selected on the chart. If less
than or more than two items are selected, the Find Path Setup window displays a Close button
instead. To search for a path, click Close to save the settings, select two items, and follow the
preceding steps to find paths between the items.
Nondirectional links and bidirectional links are always considered as part of the path, regardless of
whether Use Link Directions is selected.
Resulting actions
You can choose the actions that Analyst's Notebook takes when it finds a path:
Action Description
Select Selects all the entities on the path.
Entities
Select Links Selects all the links on the path.
Hide Others Hides all chart items that are not on the path.
This option is disabled when Reveal Hidden is selected.
Tip: To show all the hidden items, click the View tab, and then in the Show and
Hide Items group, click Show All.
Add Depth Adds an attribute to each of the chart items on the path, indicating how many
Attribute entities removed they are from the origin entity. The origin entity has a depth
attribute value of zero.
You can select an existing Number attribute to use, or specify a new one. Only
Number attributes that are defined in your chart are available in the list. If you enter
a new attribute, it is created as a Number attribute.
If you add a depth attribute to all items on the path, you can remove that attribute
from any chart items that are not on the path by selecting the Remove Attribute
from Others check box.
Option Description
Stop Stops the search along this path and the item is not included in the result.
This option might be useful for charts that contain telephone call data or financial
transactions, when all links are expected to have both a date and a time.
Continue if If the item is Ordered and is in the correct position relative to the previous item on
Ordered the path, it is included in the path. Otherwise, the search is stopped along this path.
Procedure
1. Select an entity on the charting surface.
2. Click the Analyze tab, and then in the List group, click Linked Entities Pane.
The Linked Entities pane opens and lists the entities that are linked to the selected entity.
3. To choose from the full list of properties that the list can be sorted on, click Sort then select a
property from the list.
Property Description
Entity The label of the entity. The list is sorted in ascending alphanumeric order. If an
entity has no label, its identity is used.
Link The label of the link that connects the selected entity and the linked entity. The
list is sorted in ascending alphanumeric order. If the connection consists of
several links, then the number of links is displayed, for example (2 links).
Onward The number of other entities that the linked entity is connected to. The list is
Entities sorted in descending numerical order.
Angle The positional angle of linked entities in relation to the selected entity. Entities
that are positioned directly above the selected entity, at zero degrees, are listed
first, and degree position increases down the list so that entities are listed in
clockwise order.
Position The list is sorted so that panning between entities is minimized. You can walk
through the items, clicking them to view their position in the chart. The entities at
the top of the list are typically the entities nearest the selected entity.
Related tasks
Finding items linked to a selection
You can extend the current selection of items on a chart to include entities that are linked to the
selection, directly or indirectly, and, optionally, the links between them. You can set rules about
which items are selected.
Procedure
To list all of the onward entities for a linked entity:
Procedure
1. Select one or more items on the chart.
2. Click the Analyze tab, and then in the Find Networks group, click Find Linked Items > Find
Linked Items.
The Find Items Linked to Selection window opens.
Note: To use the current settings, select one or more items and click Find Linked Items > Find
Linked Items with Current Setup.
3. Click the General tab of the Find Items Linked to Selection window and specify the general
criteria for finding items that are linked to the selection.
Format Description
With Arrows Only links that have an arrow pointing away from the original selection are
searched.
Against Arrows Only links that have an arrow pointing towards the original selection are searched.
Nondirectional links and bidirectional links are always considered when searching for linked items,
regardless of whether Use Link Directions is selected.
Restricting which items are included when searching for linked items
You can restrict the items that are included to only those entities and links with an attribute whose
value matches a specified condition. Select the attributes from the Include Entities with Attribute
and Include Links with Attribute lists and configure the conditions by using the controls that appear.
To include entities or links with an attribute of any value, select the Is Present condition. To include
entities or links that do not have the selected attribute, select the Is Absent condition.
If (any) is selected, attributes are ignored when Analyst's Notebook searches for linked items.
Resulting actions
You can choose the actions that Analyst's Notebook takes when it finds linked items:
Action Description
Select Selects all of the entities that are found by the Find Linked operation.
Entities
Select Links Selects all of the links that are found by the Find Linked operation.
Hide Others Hides all chart items that are not linked to the original selection.
This option is disabled when Reveal Hidden is selected.
Tip: To show all of the hidden items, click the View tab, and then in the Show and
Hide Items group, click Show All.
Add Depth Adds an attribute to each of the linked items, showing how many entities removed
Atttribute they are from the nearest item in the original selection. Items in the original
selection have a depth attribute value of zero.
You can select an existing Number attribute to use, or specify a new one. Only
Number attributes that are defined in your chart are available in the list. If you
enter a new attribute, it is created as a Number attribute.
If you add a depth attribute to all items that are linked to the selection, you can
remove that attribute from any chart items that are not found by Find Linked by
selecting the Remove Attribute from Others check box.
Option Description
Stop Does not find the item. No further items that are linked to this item are considered,
but items up to the item without a date are found.
This option might be useful for charts that contain telephone call data or financial
transactions, when all links are expected to have both a date and a time.
Continue Finds the item and continues to look for further linked items, according to the
Search Depth setting.
This option might be useful when you want to continue through theme lines that do
not have a date.
Continue if If the item is Ordered and is in the correct position, it is included. Otherwise, no
Ordered further linked items are searched.
Specifying each item on a path is within a certain time of the previous item
You can restrict the linked items to contain only successive items that have a date and time within a
time gap that you specify. For example, you can specify that every link on a path must take place
within an hour of the previous link. This option can apply to just links, just entities, or both entities and
links, depending on the options selected in the Date and Time area.
Procedure
To search for clusters of entities:
1. Click the Analyze tab.
2. Optional: To modify or review the search criteria, in the Find Networks group, click Find Clusters
> Find Clusters Setup. The Setup Clusters window opens.
a) Enter a binding strength threshold.
The binding strength threshold determines the minimum binding strength a group of entities
must have before Analyst's Notebook considers it to be a cluster.
b) When you enter a binding strength threshold, you can choose how Analyst's Notebook
determines the binding strength when there are multiple links between entities or values on
the links. This setting is known as the link weight.
Link Attribute Adds the values of a specified Number attribute on each link in a
connection. Select the attribute in the Link Weight Attribute list.
Connection Sum Calculates the total value of all the numeric parts of the link labels
Links between two entities.
c) In the Cluster Members area, specify how Analyst's Notebook handles any clusters that it finds.
Setting Description
Select Selects entities and the links between them that are found in a cluster. The
Cluster selection of all other chart items is cleared.
Members
Hide Others Hides all entities and links that do not belong to a cluster.
Note: If Reveal Hidden mode is selected when you search for clusters, then
the hidden items remain visible.
Cluster Assigns an attribute to every cluster member. You can select an existing Text
Attribute attribute from the list or enter a new attribute name. Analyst's Notebook
creates a new Text attribute with this name. Analyst's Notebook assigns
attribute values to the cluster members:
• C1 for members of the cluster that has the highest binding strength.
• C2 for the cluster that has the next highest binding strength, and so on.
If two clusters have the same binding strength, the cluster with the most
entities takes priority when the cluster attribute is assigned.
Binding Assigns an attribute to every chart item to indicate the binding strength that it
Strength would be assigned if it was part of a cluster. You can select an existing
Attribute Number attribute from the list or enter a new attribute name. Analyst's
Notebook creates a new Number attribute with this name.
3. To search for clusters, in the Find Networks group, click Find Clusters > Link Connectivity
Clusters.
What to do next
To emphasize any clusters that are found, you can change the color or line width of the links in each
cluster. To format the links in a cluster, select all the links in the cluster, right-click on one of the links,
then click Combined Properties. In the Edit Chart Items window, you can collectively format the
links.
Extending clusters
Analyst's Notebook can extend selections to include entities that are connected to a cluster but that
are not bound tightly enough to form part of the cluster itself.
Procedure
To display a map and associate it with the current chart:
1. Click any map in the gallery to select it. If the gallery is not shown, click Map Gallery to make the
maps available for selection. To close the gallery, click Map Gallery again. Alternatively, double-
click a map to select it and close the map selection at the same time.
2. Optional: If the required map is not visible in the gallery, you might need to log in to your ArcGIS
portal instance. In the i2 Esri Maps window, click Log In and enter your user name and password.
If you do not know your user name or password, see your system administrator.
After you log in, more maps might become available for you to select.
3. If the map that you selected contains layers that are stored on a secure server, you might need to
provide further credentials. If a Windows Security window opens, enter your credentials for the
location where the map is stored. If you do not know this information, see your system
administrator.
Location information
For an entity to be mapped successfully in the i2 Esri Maps window, it must contain location
information in the form of coordinates.
You can enter or store coordinates on entities in one or more of the following places:
• Labels
• Descriptions
• Cards
• Attributes with specific semantic type assignments
• Data records
An entity can contain several coordinates that are stored in different places. After mapping, if the
coordinates are different, then the entity is displayed on the map in each location.
Coordinates in text
You can enter coordinates in labels, descriptions, or cards as part of their summary or description.
Coordinates that are stored in text require an identifying prefix (LOC/) and suffix (//). For example,
LOC/28°16'45.55"N 81°33'59.44"W//.
Procedure
1. Select the entities that you want to send to the map.
2. Click the Analyze tab on the ribbon.
3. In the Gain Insight group, check that i2 Esri Maps is selected from the Map Provider list, then
click Maps.
The i2 Esri Maps window opens.
4. Ensure that the correct map is open or select the required map.
5. Add entities to the map in one of the following ways:
Results
The map pans to show the selected entities on the map.
If a problem occurs when you send entities to the map, a warning message is displayed at the bottom
of the map. You can try the following resolutions:
• Look at the location information for an entity and check that it is in the correct format. Right-click
the entity on the chart, and from the menu, select Edit Item Properties.
• The coordinates on a chart item might be outside the maximum valid extents of the current map. If
you change to a map that has appropriate maximum valid extents, the chart items are displayed.
Mapped items
When a map contains large numbers of mapped entities, it can be hard to see how those entities
correlate with the entities on your chart. To find an entity on the map, select it on the chart. The map
pans to the corresponding entity on the map and selects it. If you select an entity on the map, the
chart pans to the corresponding entity on the chart and selects it.
To remove entities from a map, select them, then press Delete. Alternatively, right-click one of the
selected items and select Remove Selected or Remove Unselected. The items are removed from the
map but they are not deleted from the chart. You can also remove all entities from the map by clicking
Remove All at the top of the i2 Esri Maps window. Deleting an item on the chart also removes it from
the map.
When you edit the display properties of an entity by editing its chart item properties, the display is
updated on the corresponding entity on the map.
Procedure
1. In the i2 Esri Maps window, right-click on the map and click Draw or click the drawing tool.
2. Click the shape that you require.
3. To draw the shape, do one of the following:
Option Description
Triangle, Arrow, Drag an area and release the mouse button to complete the shape.
Rectangle, Circle, Ellipse
Line, Polygon Click to insert the first point, then click to add extra points. Double-
click to complete the line or area.
Freehand Line, Freehand Drag a line or an area and release the mouse button to finish.
Polygon
Point Click the required position.
4. Optional: To delete a shape, select it and press Delete.
Note: You can close the drawing pane at any time by clicking the drawing tool.
Results
The bar chart shows how many entities are located in each distance range from the original entity.
Any items that are located outside the furthest range are not counted.
Select a row of the bar chart to focus on entities that are in a specified distance range and filter out
the other entities. The entities in the selected row are selected on the map and on the chart.
Related concepts
Focus on items of interest
You can focus on specific chart items or categories of data by viewing distributions for a selection of
your chart data. For example, in a histogram you might want to see a count of only those items that
are currently selected on your chart. You can also apply filters to bar charts and histograms to look at
specific areas of interest.
<Portal>
<Uri>http://www.arcgis.com/sharing/rest</Uri>
<ItemId>c0a0cb9dbefb452b89f38ce4a9477834</ItemId>
</Portal>
Where:
ItemID (optional) Is the ID of the map that you want to connect to by default in your
Esri Portal for ArcGIS.
Procedure
1. Locate the portal.config file and open it in your preferred editor.
2. Replace the URI with the URI of your Esri Portal for ArcGIS.
3. You can specify a map to open by default or use the first available map on your Esri Portal for
ArcGIS:
• To specify a default map, replace the ItemID with the ID of the required map.
To obtain the ID of a map, go to the portal home page and click the map to open it. The ID is the
number at the end of the address. For example, the map http://www.arcgis.com/home/
webmap/viewer.html?webmap=c0a0cb9dbefb452b89f38ce4a9477834 has an ID of
c0a0cb9dbefb452b89f38ce4a9477834.
• To use the first available map, delete the following line:
<ItemId>c0a0cb9dbefb452b89f38ce4a9477834</ItemId>
Results
You are now configured to connect to your own Esri Portal for ArcGIS. You must restart Analyst's
Notebook for the change to take effect.
To return to the default settings after you edit the configuration file, delete the portal.config file.
If the configuration file or the folder that contains it is deleted, a new configuration file is
automatically created that contains the default settings.
Procedure
1. Select the chart items that you want to send.
2. Click the Analyze tab on the ribbon.
3. If more than one map provider is available, in the Gain Insight group select Google Earth from the
Map Provider list.
If Google Earth is the only map provider, in the Gain Insight group, click Maps.
The Google Earth pane opens.
4. In the Map Chart Items pane, click the Sent Items tab.
5. Click Send Chart Item.
Procedure
To work out what is wrong, you can try:
• For a single entity, right-click the selected entity, and from the menu, select Edit Item Properties.
Browse the pages to find out where the coordinates are entered.
• For multiple entities, right-click the selected entities, and from the menu, select Combined
Properties. This enables you to determine whether there are coordinates that are set, for
example, as attributes.
Note: If the coordinates are correct, and are entered as attributes, check how the attributes are
set in the Specify Attribute Details window.
Procedure
To find a mapped item:
1. Select a chart item on the charting surface or on the Sent Items page of the Google Earth pane.
2. Click Find Selected Item in Google Earth.
This command causes Google Earth to center and zoom to that location.
Procedure
On the Options page of the Map Chart Items pane, do one of the following steps:
• Select Adds to the Map to add the selected chart items to the map.
Procedure
Do one of of the following steps:
• Clear the Send Links check box to prevent the display of links in Google Earth even if selected on
the chart. When the check box is selected, links are displayed on the map when selected in
Analyst's Notebook and sent to Google Earth.
• Select the Invert Link Colors check box to improve the clarity of the Google Earth map when the
links are drawn in a color that does not display well on the map.
Procedure
1. In the Map Chart Items pane, click the Options tab.
2. To map theme lines in this way, select the Show Virtual Paths check box.
Procedure
To specify how coordinates are used.
1. Show the Label, Descriptions, and Card Details window by selecting one of the check boxes in
the Chart Items panel of the Options page.
2. Use the following check boxes to specify where Analyst's Notebook looks for coordinates:
Option Description
Labels, Descriptions, and Coordinates are entered in the labels of entities, entity
Cards descriptions, and on cards (and you want to use these
coordinates when mapping).
Attributes Coordinates entered in attributes.
Data Records Coordinates entered in data records.
3. Coordinates entered as text in labels, descriptions or on cards must be identified by enclosing
them in a prefix and suffix. If required, you can change these identifiers. The change applies to
your charts. However, existing prefixes and suffixes on charts are not updated.
Note: The prefix and suffix are not case-sensitive.
Military Grid Grid zone UTM zone Easting Northing 4QFJ12345678 Or, with the
Reference datum code prefix:
Note: Eastings and northings can be up to five
System (MGRS) WGE*4QFJ12345678
digits long. You can also enter the grid and UTM
zones.
Procedure
To open a list view, click the Analyze tab, and then in the List group select one of the following
options:
Option Description
List Items A summary of all the items on the current chart separated into lists of
entities and links. For more information, see “Listing all the contents of your
chart” on page 167.
List Most Connected Open the List Most Connected pane to list the entities with links on the
current chart. For more information, see “Listing the most connected items”
on page 168.
List Cards A summary of all the cards that items on the current chart contain.
List Data Records A summary of all the records that items on the current chart contain.
Linked Entities Pane A summary of all the entities that are linked to selected entities.
Procedure
1. To open the List Items windows, click the Analyze tab, and then in the List group select List
Items.
2. To work with these results you can:
Option Description
Options Set options that relate to the items in your list, and to the formatting of text when
copied to the clipboard.
Sort Specify the ordering of items based on specified columns.
Filter Reduce the list of items to those that you have selected.
Reveal Remove any filtering you have set.
Copy Copy the information for selected items to the clipboard.
Delete Remove items from the list view.
Procedure
1. To list the connections on your chart. click the Analyze tab, and then in the List group select List
Most Connected.
2. In the Counts pane, select the connection type you are interested in from the Connected by list.
If you would like to list all the types of links, you can select Links of type: Any. To display only the
links that contain records, select Records of type: Any.
3. Select the option to use to list items:
Option Description
Most links Lists entities based on the number of links.
Most linked records Lists the entities based on the number of connections that contain
records.
Most connected entities Lists entities based on the number of entities to which they are
connected.
Most inbound Lists entities based on the number of links that are directed towards
the entity, excluding bidirectional links.
Most inbound records Lists entities based on the number of link records that are directed
towards the entity, excluding bidirectional links.
Most outbound Lists entities based on the number of links that are directed away
from the entity, excluding bidirectional links.
Most outbound records Lists entities based on the number of records that are directed away
from the entity, excluding bidirectional links.
Connections with the Lists entity-link-entity combinations based on the number of links in
most links the connection.
Connections with the Lists entity-link-entity combinations based on the number of records
most records in the connection.
4. Optional: You can use the Restrict options to the reduce the list to items that you have selected on
the chart surface:
• Restrict Results to Selected Entities - Only show entities that are also selected on the chart.
• Count Only the Selected Links - Only count links that are also selected on the chart.
Procedure
1. To list the connections on your chart. click the Analyze tab, and then in the List group select List
Most Connected.
2. In the Values pane, select the connection type you are interested in from the Connected by list.
If you would like to list links of all types, you can select Links of type: Any.
3. Select the Value to use to refine your list.
4. Select the option used to list items:
Option Description
Total inbound Lists entities based on the total value of the numerical link labels of the
connected links that are directed towards the entity.
Numerical values on bidirectional links are not included in the count.
Total Lists entities based on the total value of the numerical link labels of the
outbound connected links that are directed away from the entity.
Numerical values on bidirectional links are not included in the count.
Net inbound Lists entities based on the net inbound value of the numerical link labels of the
connected links. The resulting value is the total of the numerical link label
values for the inbound links minus the values for the outbound links.
For example, if an Account entity has two Transaction links, one paying in 600
from Account1 and one paying out 400 to Account2, the net inbound value is
200.
Total value of Lists the total of the numerical link label values for all links, including links with
links no directions and bidirectional links.
For example, if an Account entity has two Transaction links, one paying in 600
from Account1 and one paying out 200 to Account 2, the total value is 800.
Total relative For entities where the total of the numerical link label values is at least 10
to net change times the net total, lists entities based on the total.
For example, you can use this option to highlight accounts where large amounts
of money are passing through without remaining in the account, which might be
an indication of money laundering.
Connection Lists entity-link-entity combinations based on the total of the numerical link
totals label values for all links in a connection, including links with no directions and
bidirectional links.
For example, Account1 and Account2 might have two Transaction links
between them, one paying 400 from Account1 to Account2 and the other
paying 600 from Account2 to Account1. The connection total is 1000.
Connection Lists entity-link-entity combinations based on the net total of the numerical link
net totals label values for all inbound and outbound links.
For example, Account1 and Account2 might have two Transaction links
between them, one paying 400 from Account1 to Account2 and the other
paying 600 from Account2 to Account1. The connection net total is 200.
Numerical values on bidirectional links are not included in the count.
5. Optional: You can use the Restrict options to the reduce the list to items that you have selected on
the chart surface:
• Restrict Results to Selected Entities - Only show entities that are also selected on the chart.
• Count Only the Selected Links - Only count links that are also selected on the chart.
Tip: Analyst's Notebook shows active restrictions above the list of entities.
Procedure
1. To locate items on the chart, you can select items in the list. To select items in the list and on the
chart surface:
• Label - Selects the entity.
• Count or Distribution - Selects the links that are included in the current count (for record
counts, this action selects links that contain those records).
• Both - Selects both the entity and links.
Tip: You can select multiple items by holding either Shift or Ctrl while making your selection.
2. To highlight items of interest, click the highlighting status indicator found to the left of the item's
icon.
Tip: You can use the Highlight Top 10 option to highlight the top ten connections in the list.
3. Optional: To change the color scheme that is used to highlight items, select Highlight Colors .
You can choose between 4 standard color schemes that allow you to specify up to 10 highlight
colors. You can also edit these color schemes to match your color scheme. When you highlight
more than 10 items, the color scheme entries are repeated.
4. Optional: To further accentuate links that have been highlighted, you can use the Set Line Width
to increase the line width of highlighted links.
5. Optional: To remove all highlighting, select Undo Highlighting.
Procedure
1. Select an entity on the charting surface.
2. Click the Analyze tab, and then in the List group, click Linked Entities Pane.
The Linked Entities pane opens and lists the entities that are linked to the selected entity.
3. To choose from the full list of properties that the list can be sorted on, click Sort then select a
property from the list.
Property Description
Entity The label of the entity. The list is sorted in ascending alphanumeric order. If an
entity has no label, its identity is used.
Related tasks
Finding items linked to a selection
You can extend the current selection of items on a chart to include entities that are linked to the
selection, directly or indirectly, and, optionally, the links between them. You can set rules about
which items are selected.
Procedure
To list all of the onward entities for a linked entity:
1. In the list, identify an entity of interest, then click it. Analyst's Notebook pans the chart to center
the entity in the window.
Tip: Entities that are connected to many other entities might be significant. The Onward Entities
column helps you to identify these entities. To summarize the immediate network of a linked
entity, hover over its label in the list. If the entity has 12 or fewer onward entities, a tooltip lists
their labels. If the entity has more than 12 onward entities, a tooltip displays the label of the first
10 onward entities, and the number of other onward entities. If an entity has no label, its identity
is used.
2. To see what the entity is linked to, in the list, click the List Linked Entities button beside the entity
label.
The content of the list is replaced.
3. To list the linked entities for your previous selection, click List Linked Entities again. The icon and
identity of the previous selection is displayed again at the top of the Linked Entities pane.
Procedure
• To copy information in a table as text:
a) Select the entries in the table that you want to copy. To select multiple entries, use the Ctrl or
Shift keys.
b) Click Copy.
c) Open the application into which you want to paste the information, and press Ctrl + V.
• To copy a list of most connected items:
a) In the List Most Connected window, select an option from the Copy list.
The displayed list of items is copied to the clipboard.
b) Open the application into which you want to paste the information, and press Ctrl + V.
Bar charts Useful for viewing the distribution of data across different categories. For example,
in a chart that contains transaction data, you might want to look at the distribution of
data across different account types.
Histograms Useful for viewing ranges of data. For example, in a chart that contains transaction
data, you might choose to look at the distribution of the data according to values of
the transactions within specific ranges.
Heat matrices Useful for comparing data distributions across two dimensions. For example, in a
chart that contains transaction data, you might want to look at how many
transactions fall into each combination of the hour of the day and the day of the
week.
The categories or ranges that you focus on can apply to the ends (or entities), links, or both. For
example, on a chart that contains bank accounts of different types with transactions between them,
available bar charts might include:
• Ends - Account Type
• Links - Transaction date and time
• Both - Label text
You can then apply filters to focus on one or more categories or ranges of your data to gain a better
understanding of specific parts of your data.
Procedure
To open a bar chart or histogram:
1. Click the Analyze tab, and then in the Gain Insight group, click Bar Charts and Histograms.
The Bar Charts and Histograms pane opens.
2. Click the New tab.
Analyst's Notebook inspects the content of your chart and lists a useful set of bar charts and
histograms that apply to your data. Any entry that would produce a bar chart or histogram with just
one category or an even spread with just one entry in each category is not displayed in the list.
Each list entry includes up to three components.
Component Description
Count Summary A count of the total number of items on the current chart that match the
criteria. This count is split into ends (or entities) and links.
(as histogram) Any list entry with this component can be opened as a histogram or a bar chart.
Note: To list all possible bar charts and histograms, select the Show All check box.
3. Enter the name of a property or attribute in the Search properties field.
The list updates as you type to show the available bar charts and histograms that match your
search text.
4. Click the label to open a bar chart or if (as Histogram) is appended to the label, you can click (as
Histogram) to open a histogram.
You can open as many bar charts and histograms as you want. To open a bar chart but remain on
the New page of the Bar Charts and Histograms pane, for example to add further bar charts or
histograms, right-click an entry and select Add Bar Chart.
Note: If a bar chart is open for the histogram that you select, you cannot open it as a histogram
without first closing the bar chart. In the same way, you cannot open a bar chart without first
closing a corresponding histogram. Analyst's Notebook prompts you to change it from one to the
other.
Results
Each bar chart that you open appears on the Bar Charts page of the Bar Charts and Histograms
pane. By default, if the value for a row in a bar chart is zero, the row is not displayed. To display rows
that have a zero value, on the Options page of the Bar Charts and Histograms pane, select the
Include Empty Rows check box under Bar Chart Rows.
Any histograms that you open appear in a separate Histograms window.
You can now focus on specific chart items or apply filters to investigate your data further. You can
also look at combinations of properties by viewing heat matrices for the histograms that are open.
Procedure
1. On the New page of the Bar Charts and Histograms pane, click the words (as Histogram) to open
a histogram.
2. From the Heat Matrix list, at the top of the Histogram window, select a heat matrix to display.
For example, the Date & Time:Day of Week heat matrix shows the number of occurrences of an
event on days of the week.
3. Optional: Select a scale from the Scale list at the top of the Histogram window.
Note: The Scale list is available only when results contain date and time information without a
predefined scale.
4. Optional: Select whether to use the chart time zone or the time zones on each chart item from the
Timezones list at the top of the Histogram window.
Note: The Timezones list is available only when results contain date and time information.
5. Optional: Customize the display of the heat matrix by changing the heat matrix options.
Range Description
Linear Range Map from the range of count values to the range of colors.
(space values For example, a heat matrix contains count values in the range 3 - 22. A linear
equally) interval of 4 might be used to generate a series of scale color. These colors
represent the ranges 1-4, 5-8, 9-12, 13-16, 17-20, 21-24.
Logarithmic Similar to the linear range. The best linear interval between the minimum and
Range maximum count value is found and mapped to a logarithmic scale.
(space smaller This range results in a scale where the first item in the range covers many
values more) values, and subsequent items cover decreasing numbers of values.
This scale is useful where you have few high count values and you want to
emphasize this distribution. For example: 1-50, 51-75, 76-86, 87-93, 94-95.
If your heat matrix is based on numerical values, you can choose to limit the number of rows in the
heat matrix to a maximum of 10, 50, or 100. For example, if you open a date and time histogram and
then create a heat matrix based on label value, you can choose to limit the number of rows.
Filtering data
You can apply (activate) filters in bar charts and histograms by clicking the bars. The resulting actions,
such as whether chart items are selected and how filters are combined across the open bar charts
and histograms, depend on the settings on the Options page of the Bar Charts and Histograms pane.
If the chart items that correspond to the filters are selected, by default the selection is brushed back
onto any open bar charts and histograms.
You can choose what filters to apply across multiple bar charts and histograms. For example, you can
select:
• A single bar on a single bar chart or histogram. Click a bar to select it.
• Multiple bars on a single bar chart or histogram. Press Ctrl and click to select multiple bars or Shift
and click to select groups of bars. When you combine filters, this selection is treated as one filter.
• Multiple bars across multiple bar charts and histograms. Press Ctrl and click to select multiple bars.
When you combine filters, this selection is treated as multiple filters, one filter per bar chart or
histogram.
To deselect all chart items, click the background of your Analyst's Notebook chart. The chart items
are deselected but the filters are retained in the bar charts and histograms. To clear the filters across
all of the bar charts and histograms, click Clear All Filtering at the bottom of the Bar Charts page or
Histogram window.
Related concepts
Bar chart and histogram options
When you click on bars in a bar chart or histogram, a filter is applied (activated). You can control how
active filters are shown on a chart and how the results of multiple active filters are combined. The
settings that you choose in the Options page remain set even after you close and restart Analyst's
Notebook.
You can copy the chart items that are selected as a result of one or more filters into a new chart by
using the Copy to New Chart options on the Analyze tab of the Analyst's Notebook ribbon. Other
options are available on the Analyze tab to list the selected chart items or their data records.
Option Description
Move Use the selected bars or heat map cells as the starting point and move the selection across
the x-axis. This action is the equivalent of selecting each bar or cell in turn.
Expand Use the selected bars or heat map cells as a starting point and expand the selection from
there across the x-axis. This action is the equivalent of adding each bar in turn to the
previous selection.
Run an animation by selecting the bars or heat matrix cells of interest and clicking Play. When
animation mode runs, the Play button changes to Pause. Click this button to stop the animation.
By default, the animation ignores empty columns. To include empty columns in the animation, on the
Options page of the Bar Charts and Histograms pane, select the Include Empty Columns check box
under Histogram Animation.
Tip: Select a bar, heat matrix cell, or range of bars and cells and use the Left or Right arrow keys to
move manually through a histogram.
Option Description
Select Chart Selects the items on the chart that correspond to the active filters in the bar charts
Items and histograms.
Hide Other Hides all the items on the chart that do not correspond to the active filters in the bar
Chart Items charts and histograms. Chart item selection remains unchanged.
Selecting the Reveal Hidden in Gray check box reveals the hidden items in gray.
Note: If a link passes the filter conditions, it can be displayed only if both of its ends
are also displayed. As a result, some ends might be displayed that do not pass the
filter conditions.
Select Chart Selects the items on the chart that correspond to the active filters in the bar charts
Items and and histograms and hides all other chart items.
Hide Others
Selecting the Reveal Hidden in Gray check box reveals the hidden items in gray.
Note: If a link passes the filter conditions, it can be displayed only if both of its ends
are also displayed. As a result, some ends might be displayed that do not pass the
filter conditions. However, these ends are not selected.
Match Any Finds links that pass ANY active link filters. You can apply multiple filters across
Link Filters multiple bar charts and histograms, each filtering different types of information. Chart
items that pass any of the active link filters are found. For example, you might be
looking for transactions on a specific day of the week OR of a specific amount.
If this check box is cleared, chart items that pass ALL of the active link filters are
found. For example, you might be looking for transactions on a specific day of the
week AND of a specific amount.
Note: In the case where any of your bar charts or histograms include both ends and
links (rather than just ends or just links), any active filters in these bar charts or
histograms, in combination with other active filters, impact on the results for BOTH
ends and links. All ends and links that do not pass the filter are excluded. For example,
on a Label text bar chart that includes ends and links, if you apply a filter that selects
only entities, all links are therefore intrinsically excluded. If you now apply an extra
link filter on a different bar chart and the Match Any Link Filters check box is cleared,
no links can match all the active filters. They are excluded by the filter on the original
Label text bar chart that selected only entities.
Matching Matches link and entity combinations. Entities that pass the active entity filters,
Entities according to the Match Any Entity Filters option and links that pass the active link
with filters, according to the Match Any Link Filters option, are inspected. Only the entity-
Matching link combinations that pass the entity and link filters are found. For example, you
Links might be looking for bank accounts with a balance over 40,000 that were involved in
at least one transaction over 3000 on a Tuesday.
Note: In the case where your bar chart or histogram contains both ends and links, you
might find that some or all, entities or links are excluded as result of matching all
active entity or all active link filters.
Showing the distribution of selected chart items on bar charts and histograms
If you select items on your chart, by default the selection is shown (brushed) onto the bars of any
open bar charts and histograms. The distribution of the selected chart items is shown highlighted in
Option Description
Include Empty Includes empty columns in a histogram or heat matrix animation.
Columns
Include Empty Displays all the rows in a bar chart, including any rows that have a zero value.
Rows For example, you might want to display rows that have a zero value to
highlight periods of inactivity.
Related concepts
Focus on items of interest
You can focus on specific chart items or categories of data by viewing distributions for a selection of
your chart data. For example, in a histogram you might want to see a count of only those items that
are currently selected on your chart. You can also apply filters to bar charts and histograms to look at
specific areas of interest.
Procedure
To add items to the Activity View:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
The Activity View opens.
2. From the menu at the upper left of the Activity View, select the items to add:
Option Description
Add All Entities Adds each entity on the chart.
Add Selected Entities Adds each entity that is selected on the chart.
Add All Links Adds each link on the chart.
Add Selected Links Adds each link that is selected on the chart.
Add Ends of Selected Links Adds entities at the ends of selected links, without adding the
link as a primary item.
Add Ends Linked to Selected Adds all the entities that are linked to the selected entities,
Ends without adding the selected entities or links as a primary item.
Add Items of Type Adds all items of the type that you select.
Tip: You can also add items to the Activity View by right-clicking on an item on the chart and
selecting one of the Activity View options.
3. Choose which temporal properties to use to generate activity indicators for the items that are
added and any items that are connected to them. From the Added Items and Items Linked to
Added Items lists, select each property that you want to use to generate activity indicators.
Only properties that contain date and time information are available for selection. If the same date
and time data is contained in more than one property, select only one of those properties to
generate the activity indicator. If you select two properties that contain the same information, the
activity is counted twice. Any dates with a value of greater than December 31, 2499 are ignored.
Tip: The number next to each property list indicates how many properties are selected. To clear all
the properties in a list, hover over the number and click the cross that appears.
Results
Items are added to the Activity View and only the selected properties are used to generate activity
indicators.
Activity with start and end values that relate to two temporal values of an entity. When
an invalid duration occurs, for example when the start date and time occurs after the
end date and time, the duration bar appears in an error color.
Activity with a single temporal value that is stored as a property on a link that is
directed from the primary entity.
Activity with a single temporal value that is stored as a property on a link that is
directed to the primary entity.
Multiple temporal values, some but not all of which are selected.
Hover over an activity indicator or the label of an item row for more information about the temporal
data that is associated with the item. The summary provides the item label, and the data that is
detected. For example, John Smith (Date & Time) 12/12/2013 06:00.
Results
The view is redrawn to use the selected scale. If the scale is such that all the activity indicators no
longer fit in the view, a horizontal scroll bar is added to aid navigation.
Procedure
To look for patterns of activity:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
The Activity View opens.
2. From the Scale list, select a comparison scale from the Repeating Scales or Repeating Scales
with Grouped Rows sections of the list.
Option Description
Every 60 Seconds Sets the timeline header scale to show the time in seconds of the minute.
Rows that contain the secondary level items are grouped by minute.
Every 60 Minutes Sets the timeline header scale to show the time in minutes of the hour.
Rows that contain the secondary level items are grouped by hour of the
day.
Results
Rows are added to each primary item in the Activity View that group secondary item rows by the
selected comparison value. To zoom the view, click in the timeline header and use the mouse wheel
to scroll.
Procedure
To configure a duration:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
Results
Any pairs that you configure become available to select as properties on the appropriate property lists
in the Activity View.
Procedure
To set the Activity View to reflect item color:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
The Activity View opens.
2. At the top of the Activity View, click Formatting.
The Formatting Options window opens.
3. Select one or more of the following options:
Procedure
To configure how date-only and time-only properties are handled:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
The Activity View opens.
2. Click Partial Properties.
The Partial Properties Setup window opens.
3. To configure how to handle properties that contain date-only information, in the Date-only
Properties area, select one of the following options:
Option Description
Don't Show Ignores any date-only temporal data.
Show At Assigns a time that you specify to date-only temporal data.
Show over the entire day Assigns a default duration of 24 hours to date-only temporal data.
4. To configure how to handle properties that contain time-only information, in the Time-only
Properties area, select one of the following options:
Option Description
Don't Show Ignores any time-only temporal data.
Show On Assigns a date that you specify to time-only temporal data.
5. Optional: To use these settings for any new charts that you create, select Set as Default.
6. Click OK.
Procedure
• To focus the chart on the selected item, right-click the item and select Center on Chart.
• To automatically focus the chart on an item when you select it in the Activity View, from the
Options list, select Pan on Selection.
• To open and edit the properties of an item, right-click the item and select Edit Item Properties.
• To remove the selection from the Activity View, right-click an item and select Remove Selected.
• To remove the items that are not selected from the Activity View, right-click an item and select
Remove Unselected.
Tip: To remove all items, click Remove All at the top of the Activity View.
• To change the order of items in the Activity View, from the Sort list, select one of the following
options:
Option Description
Most Active Moves the items with the most activities to the top of the grid.
Earliest Moves the items that contain the earliest activities to the top of the grid.
Latest Moves the items that contain the latest activities to the top of the grid.
Alphabetical Sorts the items in the grid into alphabetical order, based on their labels.
Least Active Moves the items with the fewest activities to the top of the grid.
Primary items are sorted according to the selected option. Within each primary item, secondary
items are also sorted according to the selected option.
Procedure
To specify which time zone to use in the Activity View:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
The Activity View opens.
2. From the Options list in the Activity View, select one of the following options:
Option Description
Use Chart Time Zone Shows the date and time values of activity indicators in the time zone of
the chart. The chart time zone is typically the local time zone.
Use Property Time Shows the date and time values of activity indicators in the time zone of
Zones the item, card, or data record.
Procedure
To categorize items in the Activity View, and to change their sort order:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
The Activity View opens.
2. At the top of the Activity View, click Formatting.
The Formatting Options window opens.
3. Select the Prefix row labels with values of check box, and choose the attribute class to use as a
prefix from the list.
4. Click OK.
Results
The labels are updated in the Activity View. The labels on the chart remain unchanged.
Procedure
To configure how to display items that are made revealed in gray as the result of a filter:
1. Click the Analyze tab, and then in the Gain Insight group, click Activity View.
The Activity View opens.
2. From the Options list in the Activity View, select one or both of the following options:
Procedure
To create an image of the current state of the Activity View:
1. In the Activity View, change the size of the view to ensure that all of the data that you want to
report on is visible.
2. Click Copy as Picture.
An image of the contents of the Activity View is copied to the clipboard.
3. Paste the picture into a document that supports images.
Procedure
To apply a conditional formatting specification:
1. To open the Conditional Formatting pane, click the Style tab, and then click Conditional
Formatting > Conditional Formatting Pane.
2. In the Conditional Formatting pane, from the commands in the Actions panel at the bottom of the
pane, select:
Option Description
Format with Selected Use the specification that is selected in the upper part of the
Specification Conditional Formatting pane to format all items on the current
chart.
Format Selected Items Use the specification that is selected in the upper part of the
with Selected Conditional Formatting pane to format items that are selected on
Specifications the chart.
Undo Formatting Remove the last conditional formatting specification that was
applied.
Any items on your chart that meet the criteria will be modified, a “Formatting progress” on page
196 status window will notify you of the changes that are made.
3. Click Close to return to your chart.
Formatting started
As soon as the formatting starts, information about the formatting start time and current rule is
displayed. During this stage, you can stop the formatting process by clicking Cancel.
Formatting completed
The end of the formatting process. A message is displayed to show the formatting end time, total
formatting time, and the number of entities and links that were formatted. Any formatting changes
are applied to the chart after the last rule in the specification is processed. Click Close to close the
window.
Procedure
To create, edit, delete, or duplicate a conditional formatting specification:
1. To open the Conditional Formatting pane, click the Style tab, and then click Conditional
Formatting > Conditional Formatting Pane.
2. In the Conditional Formatting pane, from the commands in the Actions panel at the bottom of the
pane, select:
Option Description
New Specification Create a conditional formatting specification to which you can add rules.
The Edit Conditional Formatting Specification window is shown.
Edit Selected Edit the conditional formatting specification that is selected in the upper
Specification part of the Conditional Formatting pane. The Edit Conditional
Formatting Specification window is shown.
Procedure
To define a rule:
1. In the Edit Conditional Formatting Specification window, click New to show the New Rule
window.
2. In the Items to be formatted section, select the item type to apply the rule to by selecting
Entities or Links. If you select Entites, you also need to select the types of representation to apply
the rule to.
3. In the Item criteria section, select what the rule is based on by selecting an option:
• All items - create an unconditional rule that is applied to all items of the selected
representation.
• Items that contain records - set up rules that apply to items with records that contain specific
property types.
• Items with attribute - set up rules that apply to items with a specified attribute.
• Items with analysis attribute - set up rules that apply to items with a specified analysis
attribute.
4. In the Style to be changed section, select the aspect of style to be changed.
For example, the rule can change the enlargement of the icon on the chart, or the color of links.
5. In the Style will be changed to section, specify how the style is changed by selecting an option.
For some styles, you must click Edit to specify more options in another window.
You can set the style:
• To the value of the selected attribute or property type.
• To values from a color spectrum that is based on the selected attribute or property type. For
more information, see “Changing the color of items based on a specific range” on page 199.
• To values from a lookup table that is based on the selected attribute or property type.“Setting
styling based on specific values” on page 200
• To a specified value from a threshold or range that is based on the selected attribute or property
type.“Setting styles for a range of values” on page 201
Note: To leave the style unchanged, select Leave unchanged.
6. Optional: In the Options section, you can specify the behavior of subsequent rules and the styling
of items that do not match your rule:
• Prevent later rules changing the chart item style - locks the style for items that are matched
by the current rule. This locking information is listed in the Edit Conditional Formatting
Specification window for the current rule.
• For items which don't match the rule, set the chart item style to - select the behavior of items
that do not match the rule:
– To a specified value:
- Select Shown or Hidden to set Visibility.
- Select Specified Value and choose a style setting from the list set Font Style, Enlargement,
Icon Frame Margin, Line Width, or Line Strength.
- Select Specified Value and choose a color from the color picker to set shade or icon frame
color.
- Select Specified Value and click Edit to set an entity or link type.
Results
New rules are added to the end of the list of rules for the conditional formatting specification.
What to do next
After you complete a rule, you can continue to add and edit rules until you are ready to apply the
specification to the chart. See “Applying a conditional formatting specification” on page 195 for
details.
Procedure
To specify how the lower and upper limits are set:
1. Follow the instructions in “Creating and editing conditional formatting specifications” on page 196
to create or edit a conditional formatting specification.
2. Follow the instructions in “Adding rules to a conditional formatting specification” on page 197 to
create a rule, and in the Style will be changed to section, select Values from a Color Spectrum
based on rule basis, and click Edit.
3. Specify how the lower limit of the scale is set:
a) If you select From chart, the lower limit is automatically set to the earliest or lowest value of
the attribute or property on the chart.
b) If you select Specified value, enter a number, or date and time. Items with values at or below
this value are mapped to the color on the left of the selected scale.
4. Specify how the upper limit of the scale is set:
Procedure
To set a formatting style from a lookup table:
1. Follow the instructions in “Creating and editing conditional formatting specifications” on page 196
to create or edit a conditional formatting specification.
Procedure
To specify a type:
1. Follow the instructions in “Creating and editing conditional formatting specifications” on page 196
to create or edit a conditional formatting specification.
Procedure
To import a rule:
1. To open the Conditional Formatting Specifications window, click the Style tab, and then click
Conditional Formatting > Saved Specifications.
2. Click Format with new specification, or select an existing specification and click Edit to show the
Edit Conditional Formatting Specification window.
3. Click Import.
4. Locate and select the specification that you want to import from.
All rules in a selected specification are listed in the bottom half of the window.
5. Select the rules that you want to import by selecting the relevant check boxes.
6. Click Import.
The selected rules are copied to the Edit Conditional Formatting Specification window.
Procedure
To open the Conditional Formatting pane, click the Style tab, and then click Conditional Formatting >
Saved Specifications.
Procedure
Right-click the specification, and from the menu, select Copy to Workgroup Folder. The specification
is copied to your Workgroup folder.
Procedure
To change the location of your Local or Workgroup folders:
1. To open the Conditional Formatting pane, click the Style tab, and then click Conditional
Formatting > Saved Specifications.
2. In the Other Tasks area, click Change Local Folder or Change Workgroup Folder to show the
Browse For Folder window.
3. Select a folder or click Make New Folder.
4. Click OK to set the new folder location.
Procedure
To install the example specifications:
1. To open the Conditional Formatting pane, click the Style tab, and then click Conditional
Formatting > Saved Specifications.
2. Click Install example material.
The example specifications are shown in the list of conditional formatting specifications.
Live formatting
Live formatting in Analyst's Notebook changes the appearance of chart items, by applying conditional
formatting specifications in real time.
Live formatting extends the capabilities of conditional formatting if your chart items contain i2
Analyze records. You can run specifications automatically when i2 Analyze records are changed,
added, or deleted from the chart. The styles of items change to reflect the changing data. You need
suitable conditional formatting specifications defined before you can set up live formatting and not all
specifications are compatible, depending on your schema. Analyst's Notebook guides you to
information about rules and how they might affect the chart, as you work through the setup process.
Procedure
1. Click Live Formatting > Set Up to open the Live Formatting Set Up window.
2. Select one or more specifications from the Available specifications list and move them to the
Selected specifications list by clicking the right arrow icon. If you see an information or warning
icon next to a specification, hover your mouse pointer over the icon to display the message. For
more information about these icons, see “Live formatting system messages” on page 206.
3. Use the Up and Down commands to change the order that the specifications run. The order of
specifications is significant as they run sequentially from the top of the list. Rules set further down
the list might affect the specifications that you selected to run first.
4. Optional: You can override existing style changes and reset the items already on the chart to their
default style. Click the Reset all chart items to their default appearance before running
specifications check box.
Chart items are reset to the appearance defined by your schema.
Note: If you use the Stop and Reset Formatting command, your chart items are reset to the
appearance defined by your schema and not to any style changes that you applied previously.
Results
Live formatting starts even if your chart surface is empty. The circle icon in the Records Bar changes
color to orange to indicate that live formatting is running. You can see a summary of your selections
by hovering your mouse pointer over the Live Formatting command. Live formatting continues to run
until you select Stop or Stop and Reset Formatting.
Procedure
1. Follow the instructions in “Setting up live formatting” on page 205 to select your specifications.
2. Click Live Formatting > Save Current Settings as Defaults.
The list that you selected in Live Formatting Setup is saved as your default list.
3. If you make further changes to live formatting and want to restore your saved list, click Live
Formatting > Use Default Specifications.
4. When you open a new or existing chart, click Live Formatting > Use Default Specifications if you
want to run your saved list as the live formatting setup.
Betweenness
Betweenness centrality measures the number of paths that pass through each entity.
This measure might identify entities with the ability to control information flow between different
parts of the network. These entities are called gatekeeper entities. Gatekeepers might have many
paths that run through them that allows them to channel information to most of the others in the
network. Alternatively, they might have few paths that run through them, but still play a powerful
communication role if they exist between different network clusters.
Closeness centrality measures both direct and indirect closeness:
• Direct closeness is when two entities are connected by a link.
• Indirect closeness exists when information can pass only from one entity to another by way of a
path that runs through one or more entities.
Link betweenness
Link betweenness centrality measures the number of paths that pass through each link.
This measure can help to identify key connections of influence within the network. A link through
which many paths pass might be a route for information exchange between entities.
Degree
Degree centrality measures how connected an entity is by counting the number of direct links each
entity has to others in the network.
This centrality measure can reveal how much activity is going on and who are its most active
members.
Eigenvector
Eigenvector measures how connected an entity is and how much direct influence it might have over
other connected entities in the network.
The eigenvector scores of the entities it is connected to, is considered. For example, a person with a
high eigenvector score is likely to be at the center of a cluster of key entities that themselves have
high eigenvector scores. That person can communicate directly with those key entities compared with
a person with a low eigenvector score on the periphery of the network.
Hubs and authorities are the terms that are used to describe the two eigenvector scores that are
calculated in networks that contain directed links. Hubs see the scores for outbound links, and
authorities see the scores for inbound links. A high-scoring hub has many outbound links to high-
scoring authorities, and a high-scoring authority has many inbound links from high-scoring hubs.
Link direction
Directed links can be considered as centrality measures. A link with arrows added to it represents the
directed flow of information between entities; either in a single direction or in both directions. This
measure might have an important bearing on how quickly information is passed from one part of the
network to another. For example, a person might receive information from many others in the
network but send information only to a select few. The centrality measures for an entity where
information is channeled in both directions is higher than the measures for an entity through which
information is channeled one way.
Link weightings
Not all relationships in a network are equal. For example, the link between two people, that are
connected through a family relationship might be stronger than a link between two business
associates.
These links can be weighted so that they represent real-world strengths in social network analysis.
Weighting key paths in the network might also infer that the entities by using them to channel
information have key roles to play. For this reason, centrality measure results are affected by link
weightings.
Procedure
To change the centrality measure:
1. Click the Analyze tab, and then in the Gain Insight group, click Social Network Analysis.
The Social Network Analysis pane opens.
Note: At least one check box must be selected for analysis to take place.
5. Select the Use Link Directions check box if you want to take directed links into consideration
when you calculate centrality measures. If arrows are not displayed on a link, it is assumed that
information flows in both directions.
6. Optional: Leave the Enhanced Analysis option selected to use the advanced mathematical
algorithms to calculate results. If your chart contains several unconnected networks, or directed
links that block paths between certain entities, Analyst's Notebook takes unconnected networks,
or directed links into account and adjusts the calculations. The results reflect the relative
importance of these entities and paths to those entities and links in the entire chart.
Note: The only time that you clear the Enhanced Analysis option is if it is important that you do
not use the mathematical algorithms that are supported in Analyst's Notebook.
For example, to maintain a consistent set of results. No adjustment is made to take into account
directed links that block paths between entities. The results that are calculated for separate
unconnected networks reflect the relative importance of the entities within each network. The
links are not relative to the entities on the chart.
7. Normalize Results to adjust the calculations and display them as percentages in the Results
table. If you clear this option, no adjustment is made to the calculations and results are displayed
as raw data. Normalizing the results makes it easier to compare the centrality results of items in
different networks and charts. Click Advanced Options and choose between two different
methods of adjustment. The adjustment applies to all the selected centrality measures:
Option Description
Use the standard Results are calculated and then divided by what, in theory, is the highest
method possible result for each centrality measure. They are then expressed as
percentages in the Results table. This method is the standard normalization
method that is most commonly used in social network analysis.
Normalize results Results are calculated and the highest result or actual maximum for each
relative to the centrality measure is determined. This value is displayed as 100% in the
maximum value Results table. Every other value is divided by the actual maximum and
displayed as percentages relative to 100% in the Results table.
Procedure
To select a centrality measure and specify how results are displayed:
1. Click the Analyze tab, and then in the Gain Insight group, click Social Network Analysis.
The Social Network Analysis pane opens.
2. Click the Options tab.
3. Select the centrality measure that you want to calculate.
You can choose to calculate betweenness for entities and links, closeness, degree, and
eigenvector, and take into account the direction of links. You can also carry out enhanced analysis
and normalize your results
4. Select how the results are displayed when calculations are complete.
You can choose to show results and weightings as chart item attributes, and apply conditional
formatting to them.
What to do next
When the Options page is complete, use the Weightings page to set link weightings. Or use the
Results page to calculate and analyze your results.
Procedure
In the Social Network Analysis pane, click the Weightings tab. Select the Use Link Weightings
check box.
The weightings are added to links as attributes with the following methods in order of priority:
Procedure
To manually add a weightings value:
1. Select the links to which you want to add weighting attributes.
The same weighting attribute value is applied to all links selected.
2. Select the Manually Set Value check box.
3. In the text box, enter the numeric weighting attribute value, and then click Set Weighting for
Selection to. An attribute with the class name Manual Weighting and the manually set value is
added to the selected links.
Weightings files
Use the details stored in a separate file with the special file format .xwgt to add link weightings to
links based on link type or label text.
You create a file or import an existing one. Weighting values can be applied to:
• Links of a certain type, for example Associate links
• Links with a certain value, for example, links labeled "Brother Of"
To use a weightings file, select the From a Weightings File check box.
Procedure
To edit the weightings in use:
1. Click Edit File. The Edit Weightings window is shown.
• To add or import new weightings, use the methods that describe how to create a weightings file.
• To edit an existing weighting, select the weighting column entry and enter a new numerical
weighting value.
• To delete a weighting, select a row and click Delete.
2. Click OK.
Procedure
To create a weightings file:
1. Click Create a New File to show the Edit Weightings window.
2. Optional: To create a weighting that is based on link type, select Link Type and then click New to
enter edit mode. Enter the link type and numeric weighting value in the relevant columns and click
OK. You can create a weighting that is based on link label with the same method.
Procedure
To import an existing weighting file:
1. Click Select a File, the Select a Weightings File window is shown.
2. Use the Look in list to go to and select the .xwgt file that you want to use, and then click Open.
Results
The file path for the weightings file currently in use is displayed.
Procedure
• Select the Link Label Value check box.
To display results for links, select Links. The available columns are as follows (default columns are
marked with *):
Procedure
To hide items on your chart:
1. Select the items that you want to hide.
The selection might be the result of an analysis operation, such as Find Text, Find Path, or Visual
Search, or as a result of making a selection such as in List Items or List Cards.
2. Click the View tab.
If hidden items exist on your chart, you can choose to show hidden items that meet the specified
criteria by selecting an option and clicking Show.
Procedure
To delete all hidden items:
1. You might want to save a copy of your original chart before you delete all of the hidden items to
publish it.
2. Ensure that all hidden chart items are fully hidden on your chart (not visible). If Reveal Fully or
Reveal in Gray is selected, click the View tab and in the Show and Hide Items group, click
Reveal.
3. Press Ctrl+A to select all the visible items. Then, on the View tab, in the Show and Hide Items
group, click Reveal > Reveal Fully.
All of the hidden items are revealed but not selected.
4. Click the Select tab and in the Select Items group, click Invert.
All previously selected items are unselected and the hidden items that were revealed are now
selected.
5. Press the Delete key to delete the previously hidden items that are now displayed and selected.
Procedure
To add an icon frame to your selection:
1. Right-click an item, and select Edit Item Properties.
The Edit window is shown.
2. Select Style > Frame.
3. Select Display a Frame. The Preview area contains an example of how the framed icon looks on
the chart. The frame that is created is shaded blue with a margin width of two.
4. To change the color, select a color from the Color bar.
5. To change the width of the frame around the icon, select an option from the Margin bar.
6. Optional: Select Set Default Style to use the current settings as the default for the entity
representation.
7. When you are happy with the icon frame that is shown in the Preview area, click OK
Tip: To remove an icon frame from the selected entity, clear the Display a Frame check box and
click OK.
Procedure
To set the font on an item:
1. Right-click an item, and select Edit Item Properties. The Edit window is shown.
2. Select Style > Font.
3. Select a font to use in the Font area.
4. Select the style of the font in the Font Style area.
For example, you might want to show the font in bold, or italic.
5. Select the size of the font in the Size area.
6. Choose the font effects to use in the Effects area.
7. Set the font color by selecting a color from the Color list.
8. Set the shading style by selecting a shading style from the Shading list.
9. Optional: Select Set Default Style to use the current settings as the default for the link or
particular entity representation.
10. When you are happy with the font that is shown in the Sample box, click OK.
Procedure
To set display properties:
1. Right-click an item, and select Edit Item Properties.
The Edit window is shown.
2. Select Style > Display.
3. Select the options to use when items are shown:
• Select Default to select the default display options.
• Select Clear All to clear the display options.
4. Select how the date is shown in the "Displayed Date & Time" area. You can choose either:
Option Description
Description Shows the description of date and time that is entered in the Date & Time page.
Formatted Formats how the date and time that is entered in the Date & Time page is shown.
Select a format from the list. When the item has a date and time, a preview of how
the date and time is shown in the Preview box.
5. Optional: Select Wrap Text and set a value to use when you wrap text.
6. Optional: Select Set Default Style to use the current settings as the default for the link or
particular entity representation.
7. Click OK.
Procedure
1. Right-click on the background of your chart and select Set Default Styles.
The Set Default Styles window opens. A folder is listed for each entity representation and for
links.
2. Click the folder of the representation whose default style you want to change.
Different style pages are available depending on which entity representation or link you choose.
3. Click to open a style page. The following options are available:
Option Description
Type Settings such as the entity or link types, semantic type, line strength and width,
color, and enlargement. The type options are not available for labels.
Display Settings such as which item properties to display on the chart and how the date and
time are formatted.
Font Font settings such as style, size, and effects.
Frame Settings to choose whether to include a frame around an icon and to set its color
and margin size. The frame options are only available for icons and theme lines.
Connection Settings to determine link multiplicity, fan size, and how theme lines are diverted
through event frames. The connection options are only available for links.
4. Edit the options that you want to change, then click OK.
Related concepts
Style
Procedure
1. Click File > Chart Properties > Definitions > Attribute Classes.
2. Select an attribute class, then click Properties.
3. Select Show On Chart, then click OK.
4. In the Chart Properties window, click OK.
Results
If an item contains an instance of that attribute class, the attribute is displayed on the charting
surface.
Procedure
1. Select the chart items that you want to change.
2. Click the Style tab, and then click Change Representation.
The Change Representation window is shown.
3. Select a representation to change the chart items to.
4. Select the order behavior to apply to the chart items.
Option Description
Leave order unchanged Does not change the order and control of the date & time.
Remove order from all chart Sets items to be free - that is not ordered by date & time
items values.
Add order to all chart items with If a date & time is detected, the items are set to be
date and time controlling.
5. Click OK.
Related concepts
Apply layouts to association charts
Resetting style
Reset modified chart items to their default style and appearance by using the Reset Style option.
Procedure
1. Select the item or items that you want to change.
2. Click the Style tab of the ribbon, and then click Reset Style.
The style of the selected items changes instantly. For example, if you select a Person entity that is
larger than Person entities specified by the chart, the size decreases to match the default size.
Note: You can undo and redo your actions from the Quick Access Toolbar at the top of the
screen.
Chart layouts
Layouts provide a quick way of automatically rearranging the entities and links on your chart. Layouts
improve the appearance of your chart and to help you analyze the structure of chart data. When a
layout is applied, Analyst's Notebook automatically resizes the chart so that you can see all chart
items without having to adjust your view.
Analyst's Notebook provides two main types of layout, depending on what data your chart contains:
• Layouts for association charts
• Layouts for timeline charts
For new charts, it is a good idea to try different types of layout to determine which provides the best
view for your investigation. When you identify a layout, you can then try experimenting with the
settings for this layout for even better results.
Layouts can be useful when new data is incorporated into the chart. You can rerun a layout on the
whole chart to analyze what effect the new information has on the chart.
Note: After you manually arrange chart items for presentation, if you run a layout you will lose your
changes.
Circular layout
The Circular layout does not reveal the structure of your chart data in the same way as the Peacock or
Grouped layout. It might be useful when you want to arrange a number of entities by type in a circular
pattern.
A Circular layout can be used in charts with connected and unconnected entities. If the Blocking
Required check box is cleared in the Setup Layouts window, all entities are arranged into a circle,
even if they are not linked to any other entities.
Note: The entities in a Circular layout are sorted by type and not by the number or destination of links
between them. Therefore, this layout might result in many crossed links inside the circle.
By using a Circular layout, you can:
• Specify the maximum width and height of the rearranged chart.
Note: The height or width of the chart might exceed the height or width that you specify. For
example, if your chart contains grouped items that are spaced far apart. Chart items in a group are
not moved relative to each other.
• Position an entity in the center of the circle.
• Include an inner and outer ring.
• Specify several circles or a single circle.
A Circular layout might not be appropriate for charts that contain:
• Many ordered or controlling items. These items are not moved.
• Many theme lines, for example timeline charts.
• Boxes enclosing other entities. The relationship between the box and the entities within it is lost.
Grouped layout
The Grouped layout is useful when you have many linked entities. You can find out whether there are
certain entities to which a number of other entities are linked. It helps to identify groups of
interconnected entities and the relationships between them.
The Grouped layout is more rigid than the Peacock layout. It always attempts to rearrange your chart
data into a similar pattern. This pattern has a group of interlinked entities at the center, and other
groups 'fanning out' from this central group.
Note: Using a Grouped layout does not display the structure of the network within the groups clearly.
To see more detail in the structure, use a Peacock layout.
By using a Grouped layout, you can:
• Set the maximum width and height of the rearranged chart
• Specify a minimum separation for items
• Position an entity at the center of the chart
A Grouped layout might not be appropriate for charts that contain:
• Many ordered or controlling items. These items are not moved.
• Mostly theme lines, for example timeline charts.
• Boxes that enclose other entities. The relationship between the box and the entities within it is lost.
• Only a few linked entities.
Hierarchy layout
For charts that contain organizational structures, you can use the Hierarchy layout to visualize how
key individuals control different operations. To show the relative status of entities, peers in the
organization are aligned.
To use the hierarchy layout, one or more entities must be identified as root entities. The other items in
the chart are rearranged in relation to the identified root items.
By using a Hierarchy layout, you can:
• Set the separation between entities. The depth is the separation between entities at different levels
in the hierarchy from the root entity or entities. The breadth is the separation between entities at
the same level in the hierarchy.
Note: If the Legacy Mode check box is cleared, sibling entities are grouped closer together, which
might affect the breadth separation.
• Specify whether to arrange the entities from top-to-bottom or left-to-right.
• Choose how to determine the root entities of the hierarchy.
• Specify whether to use corners when you lay out the chart.
• Choose whether to revert to the legacy mode for the layout. Legacy mode does not allow for entity
extents or allow animation. In addition, items on the same level of the hierarchy are not sorted to
reduce crossed links in legacy mode.
• Choose whether to animate the layout. Animation is not available if you select the legacy mode.
Organization layout
The Organization layout is useful for charts that contain organizational structures, and you can
identify one or more key individuals who control different operations. To ensure that links between
entities are visible, peers in the organization might not be aligned.
You can group and ungroup chart items and apply an Organization Layout. The items in the group are
retained.
By using an Organization layout, you can:
• Set the separation between entities
• Specify the orientation of the chart
• Choose how to determine the root of the chart
Packed layout
The Packed layout is useful for laying out chart items such that empty space is minimized on the
chart. This layout can make your chart more compact to view and print.
A Packed layout can be used for charts that have many connected and unconnected entities. Other
layouts often arrange chart items in a single row across the width of the chart. These layouts make
wide charts that are difficult to see in a single view. When a Packed layout is applied, the items that
have the most connected entities are grouped first on the left side of the chart. The remaining items
are shown next to that group, in descending order of nodes, across and then down. Entities that are
not connected to any other entity are shown in a row at the bottom of the chart
You can customize the behavior of a packed layout in the following ways:
• Specify the group separation value
• Animate the chart as the layout is applied
Peacock layout
The Peacock layout is useful when you have many interlinked entities, because it groups the other
entities that an entity is linked to.
A Peacock layout can be used to:
• Identify entities at the center of much activity in high volume data, for example telephone data or
financial transactions.
Ordered layout
The Ordered layout is most useful when you have a chart with a sequence of events. It separates each
event from the next horizontally by a distance you specify in the layout setup to read your data much
more easily. The distance that you specify takes into account the width of chart item labels but not
link labels.
An Ordered layout is useful:
• When you import a volume of data and must apply an initial layout.
• For analysis of high volume data, especially of events with date & time.
• For presentation and printing.
By using an Ordered layout, you can:
• Apply the layout to the entire chart, limit the layout to selected items, or limit the layout to items
that are in a specified date and time range.
• Set the distance between successive items. You can choose to set the distance between all items or
controlling items. For example, by selecting controlling items you can maintain the position of items
such as textual annotation or theme line icons.
Proportional layout
The Proportional layout is most useful when you have a chart with a sequence of events. It displays
an accurate representation of when items occur in relation to each other. This layout can help to gain
Procedure
To modify the layout settings:
1. Click the Arrange tab, and then click Layout Setup.
The Setup Layouts window appears.
2. From the list on the left of the window, select the chart layout to modify.
3. Change the layout settings to suit your requirements:
Entity Prevents the rearrangement of key entities, either Compact Peacock, Peacock
Constrain based on selection status or a specified attribute.
ts
Double Arranges entities into two rings, one within the Circular
Ring other.
Blocking Arranges groups of related entities into multiple Circular
circles.
Animated Specifies whether the view shows you the steps that Hierarchy, Minimize Crossed
are taken to transform your chart to the selected Links, Organization, Packed,
layout. Compact Peacock, Peacock
Apply To Specifies which items on the chart are grouped. You Grouped by Time, Ordered,
can group all items, the selected items only, or Proportional, Theme Line
items associated with a particular time period.
Group Sets the scale at which items are grouped. Grouped by Time
Items
Within
Root Selects the starting point for grouping within Hierarchy, Organization
hierarchies and organizations.
Orientati Specifies the direction of the layout and the Hierarchy, Minimize Crossed
on alignment of items within the layout. Links, Organization
Add Add corners to the links in a hierarchy so that they Hierarchy
Corners are arranged horizontally and vertically.
Outer Specifies the items to position at the boundary. Minimize Crossed Links
Boundary
Width Specifies how the width of the layout is determined. Proportional
Order Specifies how the order of the theme lines is Theme Line
determined.
Legacy Uses the original Hierarchy layout, which does not Hierarchy
Mode allow for entity extents, order items within layers, or
provide animation.
Procedure
Click the Arrange tab, and then in the Align and Space group, click one of the following buttons:
Option Description
Align Move selected chart items so that they are aligned vertically without moving each
Vertically chart item up or down.
The center of each chart item is moved to an invisible alignment line. If most of the
selected items are on the same vertical line, the other selected items are centered
on that vertical line. If none of the selected chart items are on the same vertical
line, all selected items are centered on a line that is mid way between all of the
selected chart items.
Tip: You might use Space Vertically after Align Vertically, to space out your
aligned items evenly.
Align Move selected chart items so that they are aligned horizontally without moving
Horizontally each chart item to the left or right.
The center of each chart item is moved to an invisible horizontal alignment line. If
most of the selected items are on the same horizontal line, the other selected
items are centered on that horizontal line. If none of the selected chart items are
on the same horizontal line, all selected items are centered on a line that is mid
way between all of the selected chart items.
Tip: You might use Space Horizontally after Align Horizontally, to space out your
aligned items evenly.
Space Entities Move automatically a number of selected chart items so that an even amount of
> Space white space is placed between them vertically. The chart items are not moved
Vertically horizontally.
For each selected item, an invisible box is drawn around the chart item. This box
includes the height of the item and the full width of any labels and attributes. The
selected chart items are moved to a set vertical distance from the top and bottom
edge of each invisible box.
Note: The File > Chart Properties > Options > Display > Snap to Grid option has
no effect upon chart items that are spaced vertically with this function.
Space Entities Move automatically a number of selected chart items so that an even amount of
> Space white space is place between them horizontally. The chart items are not moved
Horizontally vertically.
For each selected item, an invisible box is drawn around the chart item. This box
includes the height of the item and the full width of any labels and attributes. The
selected chart items are moved to a set horizontal distance from the left and right
edges of each invisible box.
Note: The File > Chart Properties > Options > Display > Snap to Grid option has
no effect upon chart items that are spaced horizontally with this function.
Grouping items
You can group or ungroup items on your chart. You can also copy groups and paste them into a new
chart or application.
Procedure
To add chart items to a group, clear the group, or select the items in a group, select one of the
following commands:
• Right-click a selection of chart items, and select Group from the menu.
• To clear the group, select the group, and then select Ungroup.
• To select all the items in the group, select the group, and then select Select Grouped Items.
• To delete a group, select the group, and then press Delete.
Check spelling
Spelling checks can run automatically as you type. Possible spelling mistakes are highlighted and
suggestions are made for corrections. A spelling check can be run after you create a chart before it is
published. When you finish creating a chart, it is searched for spelling and other errors. When a
possible error is identified, you can correct it and then continue the check.
Procedure
To check spelling in a chart:
1. Click the Publish tab, and then in the Prepare group, click Spelling.
The first spelling error is displayed in the Not in Dictionary box.
2. A suggested replacement is displayed in the Change To box. Select one of the following options in
the Suggestions area:
Option Description
Ignore Leaves the error unchanged, but continues to identify any further instances of this
error.
Ignore All Leaves all instances of this error unchanged for the current session.
Change To accept the suggested correction, click Change. To use another of the
suggestions in the list, click the required word then click Change.
If none of the suggestions are the required word, type the correction in the Change
to box and then click Change.
When the selected error is a repeated word, this changes to Delete so you can
easily remove the second instance of the word.
Change All Changes all instances of the word in the Not in dictionary box to the word in the
Change to box. Changes all instances of the error in the active chart only.
Add Adds the word in the Not in Dictionary box to the dictionary. When Analyst's
Notebook encounters this word in future, in this chart or any other charts, it will not
be identified as a misspelling.
Close Closes the Spelling window without making the current suggested change, and
stops checking the chart.
3. A message is displayed when the spelling check is complete. Click OK to close it.
Procedure
To show the Spelling page:
1. Click File > Options.
2. In the Options window, select the Spelling page.
3. You can choose to spell check entities, links, or both entities and links. Specify chart items to
include in the spelling check, by selecting:
Option Description
Entities and Links Spell check all entities and links.
Entities Only Spell check only entities.
Links Only Spell check only links.
4. You can tell Analyst's Notebook to ignore certain kinds of text in your chart when you check
spelling. You might want to ignore words with numbers. The spelling check can also suggest
similarly sounding or similarly spelled words. Select or clear the following check boxes:
Option Description
Capitalized words For example, Canada.
Uppercase words For example, ASAP.
Words with numbers For example, Windows2000.
Mixed case words For example, AstroTurf.
Domain names For example, www.awebsite.com
HTML markup For example, <p>
Report doubled words For example, the the.
Case-sensitive checking
Suggest similarly sounding words Suggests "whose" and "hoes" for "hoose".
Suggest similarly spelled words Suggests "house" and "choose" for "hoose".
Suggest split words
Procedure
To check spelling automatically as you type:
1. Select the Check Spelling as You Type check box.
2. When you type text on your chart or in any properties page, Analyst's Notebook uses wavy red
underlining to indicate a spelling error. To correct an error, right-click a word with a wavy
underline, and then click the correction that you want from the menu.
Procedure
1. To open the Edit Legend window, click the Publish tab, and then in the Prepare group, click
Legend. If your chart does not currently contain a legend, the Legend Population Option window is
displayed.
2. Select the Items page on the Edit Legend window.
3. In the Add Entries For area, select the appropriate check boxes to select entry types you want
included in the legend.
4. In the Action area, select the appropriate option to specify how new entries are added to an
existing legend.
Procedure
1. On the Edit Legend window, click Title. To show the Edit Legend window, click the Publish tab,
and then in the Prepare group, click Legend. If your chart does not currently contain a legend, the
Legend Population Option window is shown.
a) To populate the legend from the items on the current chart, click Yes on this window. A legend
is created by using the default settings for each entry.
b) To populate the legend manually, click No on this window. A blank legend is created.
2. In the Text box, enter the information that you want to include in the legend title such as name,
date.
3. You can enter more than one line of text, by pressing the Enter key or by creating extra title
entries. By default, each new title entry is added below any existing entries.
4. To change the font of the title, click Font. Use the Font window to select the font.
Tip: If you are editing an existing legend, the legend text box is populated with any previously
created title (and other) entries. Use the Edit Legend Title window to edit title entries.
Procedure
1. On the Edit Legend window, click Attribute. To show the Edit Legend window, click the Publish
tab, and then in the Prepare group, click Legend. If your chart does not contain a legend, the
Legend Population Option window is shown.
a) To populate the legend from the items on the chart, click Yes. A legend is created by using the
default settings for each entry.
b) To populate the legend manually, click No. A blank legend is created.
2. In the Description box, enter the text to appear in the legend for that attribute.
3. Select the attribute symbol from the list that is displayed in the Symbol box. This list contains all
available attribute symbols. You can use the scroll bar or use the up and down keys to access the
attribute you require. If you know the name of the attribute, then click in the symbol list and type
the name.
4. Click OK to confirm the entry and return to the Edit Legend window.
Tip: To edit an existing entry, either double-click the entry to be edited or select it and click Edit.
The Edit Legend Attribute Entry window is shown. Edit the entry.
Procedure
1. On the Edit Legend window, click Icon. To show the Edit Legend window, click the Publish tab,
and then in the Prepare group, click Legend. If your chart does not currently contain a legend, the
Legend Population Option window is displayed.
a) To populate the legend from the items on the current chart, click Yes on this window. A legend
is created by using the default settings for each entry.
b) To populate the legend manually, click No on this window. A blank legend is created.
2. In the Description box, enter the text to appear in the legend for that icon.
3. Select the icon from the list that is displayed in the Icon box. This list contains all icons available.
You can use the scroll bar or use the pointer up and down keys to access the icon you require. If
you know the name of the icon, then click in the icon list and type the name.
4. Click OK to confirm the entry and return to the Edit Legend window.
Tip: To edit an existing entry, either double-click the entry to be edited or select it and click Edit.
The Edit Legend Icon Entry window is shown, in which you can edit the entry.
Procedure
To add or edit a icon frame legend entry:
1. To show the Edit Legend window, click the Publish tab, and then in the Prepare group, click
Legend.
a) To populate the legend from the items on the current chart, click Yes. A legend is created by
using the default setting for each entry.
b) To populate the legend manually, click No. A blank legend is created.
2. Click Icon Frame to add a new icon frame entry or double-click an existing icon frame entry to edit
it.
3. Enter the description for the legend entry.
4. Select the color to use for the icon in the legend entry.
5. Click OK to confirm the entry and return to the Edit Legend window.
Procedure
1. On the Edit Legend window, click Line. To show the Edit Legend window, click the Publish tab,
and then in the Prepare group, click Legend. If your chart does not currently contain a legend, the
Legend Population Option window is shown.
a) To populate the legend from the items on the current chart, click Yes on this window. A legend
is created by using the default settings for each entry.
b) To populate the legend manually, click No on this window. A blank legend is created.
2. In the Description box, enter the text to appear in the legend for the line.
Results
You create entries for each convention you are using in your chart.
Procedure
To add font details to the legend:
1. To show the Edit Legend window, click the Publish tab, and then in the Prepare group, click
Legend.
2. Select Font
The Add Legend Font Entry window opens.
3. In the Description box, enter the text to show in the legend for that font.
4. To change the font, click Font.
5. Click OK to confirm the entry and return to the Edit Legend window.
Tip: To edit an existing entry, either double-click the entry to be edited, or select it and click Edit.
The Edit Legend window is shown in which you edit the entry.
Procedure
To add or edit a legend time zone entry:
1. On the Edit Legend window, click Time Zone. To show the Edit Legend window, click the Publish
tab, and then in the Prepare group, click Legend. If your chart does not currently contain a legend,
the Legend Population Option window is shown.
a) To populate the legend from the items on the current chart, click Yes on this window. A legend
is created by using the default settings for each entry.
b) To populate the legend manually, click No on this window. A blank legend is created.
2. From the Time Zone list, select a time zone to add. The long names of the selected time zone are
shown in the Description box.
3. To change the font of the legend entry, click Font. The Font window is shown, in which you can
select the font.
Procedure
On the Edit Legend window, click Link. To show the Edit Legend window, click the Publish tab, and
then in the Prepare group, click Legend.
• To populate the legend from the items on the current chart, click Yes. A legend is created by using
the default settings for each entry.
• To populate the legend manually, click No. A blank legend is created.
Tip: To edit an existing entry, either double-click the entry to be edited, or select it and click Edit.
Note: The default Horizontal Chart Location and Vertical Chart Location options are Free. You can
drag the legend anywhere on the chart.
Compatibility warnings
Support for the following features depends on the version of Analyst's Notebook that you are using. In
versions earlier than Analyst's Notebook 8.5, icon frames, displaying pictures on entities, and setting
icon options are not supported.
Procedure
To see more information about compatibility warnings:
1. In the Compatibility Warning window, select one of the following options:
Option Description
Details Displays a summary of the affected features.
Full Report Generates a comma-separated value (CSV) file that contains further information.
2. Click OK to save the chart.
Tip: If you do not want to be warned about compatibility issues in the future, clear the Show this
Warning when Saving check box. To see warnings again when you save, select the compatibility
warning option in the Setting saving application options page.
Procedure
• To remove data records for a selection of chart items, click the Publish tab, and then in the Redact
and Purge group, click Purge Data Records.
• To remove all data records, click the Publish tab, and then in the Redact and Purge group, click
Purge All Data Records.
Note: You can undo the deletion of data records from your chart items by clicking the Undo button
in the Quick Access Toolbar.
Related tasks
Displaying data records
Depending on the data source, data records are attached to items when you add data from a data
source. Data records contain data that is copied from the source record, so that you can view any
copied data that is not displayed on the charting surface.
Presenting charts
There are several ways to change your view of a chart so that it is easy to present. If the whole chart
does not fit in the application window, you can move around your chart with a keyboard or a mouse.
Alternatively, you can zoom in or out to see more or fewer items.
Procedure
To split a chart window into panes:
1. Click the View tab, and then in the Window group, click Split.
Two-gray lines that cross at right angles are displayed on your screen, which you can move around
by using the pointer.
To split your window into just two panes, drag the pointer to one edge or the bottom of the screen.
2. Double-click the split intersection in the middle of the panes to remove the split.
When the pointer is over the intersection, it changes to four small arrows. The currently selected
pane fills the entire window.
3. To move the position of the split, click Split and drag the split to a new location.
Note: You can click the vertical or horizontal split line to move the split along just one axis (left-
right or up-down).
Procedure
To define a list of items to browse:
1. Click the View tab, and then in the Show group, click More Panes > Pan through Selection.
2. Select the items that you want to browse. This selection might result from using one of the
following analysis tools:
• List Items
• Visual Search
• Find Linked
Note: You can select the items manually. If you have a theme line with many event frames
attached to it, select all of the event frames that are attached to the theme line.
3. In the List Options list on the Pan through Selection pane (the second list), select one of the
following options:
Option Description
Replace List with Selection Removes any existing items in the browse list before you add the
current selection.
Add Selection to List Adds the current selection to items already in the browse list.
4. Click Apply Command, next to the List Options list. Items are added to the browse list in the
order in which they were selected, for example in the List Items window. The item that is added
last is selected in the browse list.
Tip: To directly add items to the browse list when you click them on the chart surface, set Lock/
Unlock List to off.
5. Optional: To sort the browse list, select an option from the Sort Options list, then click Apply
Command next to the Sort Options list.
The list is sorted.
6. To move between items in the browse list, click the following buttons:
Option Description
Browse to Next Item Moves to the next item in the list.
Browse to Previous Item Moves to the previous item in the list.
The item is centered in the chart window. Its label is shown in the browse list. Entities are
displayed by using their label. Links are displayed by using the link summary.
7. To clear the browse list, select Clear List from the List Options list (the second list), then click
Apply Command next to the List Options list.
Using snapshots
A snapshot is a view of your chart at a particular stage in its development. It captures the position and
number of all visible chart items. The display settings, such as level of zoom and position of chart in
Procedure
To open the Snapshots window, click the Publish tab, and then in the Snapshots group, click Take
Snapshots.
Publish a chart
Analyst's Notebook provides a range of publication formats for a chart, and provides ways to ensure
that chart recipients do not receive sensitive data.
When you are ready to publish your chart, you can take one of the following actions:
• Publish the .anb file.
• Save the chart in alternative formats such as an image or a PDF file.
• Produce printouts of the chart.
• Save a redacted copy of the chart in which sensitive information is removed.
Note: You can purge data records at any time, such as when you prepare a chart for publication.
Saving as a picture
You can save a chart as a picture so that you can use it, for example, in documents or reports and
publish them. You can save the entire chart, or a portion of a chart that displays chart items of
interest.
Procedure
To save a chart as a picture:
1. Click the Publish tab, and then in the Save as Picture group, click one of the following buttons:
• To save the view that is displayed by the current window, click Current View.
• To save the entire chart, click Entire Chart.
Note: When you save a chart as a picture, the following elements of the chart are also saved in the
picture:
• Time bar
Procedure
1. To save a snapshot as a PowerPoint slide, in the Snapshots window, select a snapshot and click
Export to PowerPoint. The Save As window opens.
2. In the Save As window, navigate to the directory in which you want to save the file.
3. In the File name box, enter a name for the file to be saved.
4. Click Save. Analyst's Notebook saves the file, then displays the snapshot in a PowerPoint slide.
Note: If you do not want to view the snapshot in a PowerPoint slide, clear the Open the
Powerpoint file check box.
Printing to PDF
You can print a chart as a PDF document. To protect the document, you can set PDF security options.
Procedure
1. Optional: Set security options for the PDF document.
2. To print the chart as PDF, click the Publish tab, and then in the Print group, click the arrow below
Print to PDF. In the menu, click Print to PDF.
The Save As window opens.
3. In the Save As window, navigate to the directory in which you want to save the file.
4. In the File name box, enter a name for the file to be saved.
5. Click Save. Analyst's Notebook saves the PDF file, then displays options for next steps.
Note: If you specified any passwords, you are asked to confirm those passwords in the Confirm
Passwords window.
6. Select the next steps, then click OK.
For example, you can open the PDF file.
Procedure
1. Click the Publish tab, and then in the Print group, click the arrow below Print to PDF.
2. In the menu, click PDF Security Options. The PDF Security Options window opens.
3. Optional: In the Document Open Password field, type the password that the reader must enter to
open the PDF document.
Note: Do not rely on PDF password protection to secure sensitive documents.
4. Optional: To control what the reader can do with the document, you must enter a permissions
password then select which actions are permitted. If you do not enter a permissions password, all
the actions in the Permissions group are permitted.
a) In the Permissions Password field, type the password that the reader must enter, and then
modify which actions are permitted to the reader.
b) In the Permissions group, select actions.
5. To save the settings, click OK.
Printing charts
Analyst's Notebook provides various options for printing an open chart, such as choosing the printer
to use, and selecting which chart information to include in page headers and footers.
Procedure
To print an open chart:
• Click the Publish tab, and then in the Print group, click Print > Print. You can pick a printer and
choose how many copies to print.
Alternatively, if you would like to change the content that is printed:
• Click the Publish tab, and then in the Print group, click Page Setup.
The Page Setup options are displayed. Modify the page setup and click Print.
Option Description
Page Controls the size and layout options of the chart.
Margins Add a margin to frame the items on the chart.
Borders Add a visible border to the chart and determine whether background colors
are included in the output.
Annotation For timeline charts, you can specify where the time bar and theme line
names are displayed.
Header and Footer Add chart summary and custom property information to your chart. For
example, page numbers, and a title.
Procedure
To specify a method to use:
1. Click the Publish tab, and then in the Redact and Purge group, click Save a Redacted Copy.
The Save a Redacted Copy Options window opens.
2. Click Add to show the Add a Redaction Method window.
3. Select the methods to be used to redact the chart:
Option Description
Data Records To remove data records from a specific data source, specify the name of
based on their data the data source to which the data records are attached.
source
Items and Cards To remove items and cards that are based on their grading:
based on their
a. Select the items to remove. Items can be chart items and cards, only
Grading
chart items or only cards.
b. From the "Based On" list, select a grade.
c. In the "For Values" area, select one or more values.
Items based on a To remove items that are based on Flag attribute classes:
specified Flag
a. From the "Remove items when" list, select the attribute class.
Attribute
b. Select the condition to use with items that have the attribute class
assigned.
For example, a condition might be that the attribute is present or absent,
or has a value of Yes, or No.
Items based on a To remove items that are based on Text attribute classes:
specified Text
a. From the "Remove items when" list, select an attribute class.
Attribute
b. Select a condition from the list. For example, a condition can be: equal
to, contains, starts with, or ends with.
c. Enter the value for the attribute.
4. Click OK to close the Add a Redaction Method window.
5. Optional: To remove entities that no longer have links, select the Remove entities which have all
their links removed check box.
6. Click OK. In the Save as window, navigate to the directory in which you want to save the file. Enter
a name for the redacted chart and click Save. The chart is saved as a redacted copy, and a Cover
Sheet window is shown.
7. Click OK to close the Cover Sheet window.
Procedure
To open the Reporter:
1. Click the Publish tab, and then click Reports.
2. In the Report On window, select one of the following options.
Option Description
New Create a report specification.
Duplicate Duplicate the selected report specification.
Edit Edit the selected report specification. For example, you might want to change the
title, destination, content, and format of the specification.
Delete Delete the selected report specification.
Load Load a report specification.
Run The selected report specification runs. You might be prompted for a file name and
location. A report is generted by using the criteria that you selected.
Procedure
To create a report specification:
1. Click New.
2. The Edit Report Specification window is shown. Specify the destination, content, and format of
the specification in the pages of the window.
3. In the Report on area, select one of the options for the generated report.
4. Click OK.
Procedure
To duplicate a report specification:
1. Select a report specification to duplicate, and click Duplicate. An exact copy of the currently
selected report specification is created. You might edit the duplicated report specification to
change the title.
2. Optional: The duplicate report specification is added to the list of specifications. You can change
the order of report specifications, select one, and drag it up or down in the list.
3. Click Edit. The Edit Report Specification window for the duplicated specification is shown where
you edit the required properties.
Procedure
To edit a report specification:
1. Click Edit.
2. Edit the name, destination, content, and format of the generated report.
Option Descriptions
Full Report Contains a list of entities and links, with the following information for each:
• Identity
• Label
• Ends (for links only)
• Type
• Strength
• Date and time
• Description
• Grades
• Source type
• Source reference
• Attributes
• Cards
List of Entities and Contains a list of entities and links, with the Type, Label, and Ends (for links
Links only) information for each.
List of Entities and Contains a list of entities and links, with the Type, Label, and Ends (for links
Links (Tabbed) only) information for each. Tabs are included between each field of
information to make the report suitable to be pasted into a spreadsheet
Entity, Link and Card Contains a list of entities, links, and cards with their Grade information.
Grades (Tabbed) Tabs are included between each field of information to make the report
suitable to be pasted into a spreadsheet.
Entity, Link and Card Contains a list of entities, links, and cards with their Label, Ends (for links
Descriptions only), and Description information. Cards are listed directly under the entity
or link to which they belong.
All Cards Contains a list of cards, with the following information for each:
• Chart item (the chart item to which the card belongs)
• Summary
• Time
• Grade
• Source type
• Source reference
• Contents
Procedure
In the Edit Report Specification window:
1. Select Load.
2. Browse to the location of the report specification file.
Report specifications are stored in a file named Reporter.rep. This file is typically found in:
C:\Users\IBM_ADMIN\Documents\i2\i2 Analyst's Notebook 8\Report
Specifications\Reporter.rep.
3. Select the required report specification and click OK.
Note: You can select more than one report specification by using the Ctrl or Shift keys. The Select
Specifications window closes and you are returned to the Report On window where the loaded
report specifications are listed. If a report specification exists with the same name as the one
being loaded, it is not overwritten and both specifications are displayed in the list. For clarity, you
might want to rename specifications to provide unique names.
Procedure
In the Chart Items area of the Content page of the Edit Report Specification window, select one of
the following check boxes:
• Icons
• Theme Lines
• Event Frames
• Boxes
• Circles
• Text Blocks
• OLE Objects
• Labels
• Links
Tip: To select all chart items in the list click Select All. To clear the selected chart items, click Clear
All.
Procedure
In the Card Detail area, select one of the following check boxes:
Option Description
Minimum A specific minimum grade for any (or all) of the grades.
Grade
Select the Minimum Grade check box and select the values that are required for the
three grade types from the appropriate lists.
The values that are available for the grades are defined in the grading system that is
used for your chart.
Maximum A specific maximum grade for any (or all) of the grades.
Grade
Select the Maximum Grade check box and select the values that are required for
the three grade types from the appropriate lists.
The values available for the grades are defined in the grading system that is used for
your chart.
Keywords Contain specific keywords. Select the Keywords check box and enter the required
keywords in the box. Separate multiple keywords by commas or spaces. The
keywords might be contained in the card summary, source type, source reference,
or description.
Procedure
To sort card information by grade:
1. In the Sorted by list select one of the following options:
Option Description
Unsorted Cards are displayed in the order that they are included in the chart item.
Grade 1 Cards are sorted alphabetically by the value of Grade 1.
Grade 2 Cards are sorted alphabetically by the value of Grade 2.
Grade 3 Cards are sorted alphabetically by the value of Grade 3.
2. Click OK to save your changes and close the window.
Procedure
In the Output area of the Content page of the Edit Report Specification window, select one of the
following options:
Option Description
Everything All the item information (such as identity and label) and the card information that
is associated with each item.
Card Detail Only Only the card information.
Procedure
Enter the title of the report in the Title box.
Tip: To include the file name of the chart in the report title enter @chart in this box.
For example, for a chart that is named 'Account Transactions', the title format: Report on @chart
generates a report with the title 'Report on Account Transactions'.
Attribute parameters
Information that is stored in attributes can be used when you create a report specification.
Attribute parameters are used to report on the attributes that are associated with the entities and
links in your chart, and as such they are entered in the Entities and Links boxes of the Format page.
You enter attribute parameters in the Entities box when you want to report on attributes for entities,
and similarly, you enter attribute parameters in the Links box when you want to report on the
attributes for links.
The @attributes parameter is always used to report on your attributes and can be entered in one of
three forms:
Card parameters
Information that is stored in cards can be used when you create a report specification.
The following card parameters are available on the Format page of the Edit Import Specification
window:
Procedure
Depending on how page breaks are displayed in the report, select the following check boxes:
Option Description
Page Break After Each Item Insert a page break after each entity or link that is included in the
report.
Page Break After Each Card Insert a page break after each card that is included in the report.
Note: You can also separate information in the report by inserting the tab character (by using the
@tab parameter), or by the use of commas, spaces, carriage returns, or other punctuation between
parameter names in the Entities, Links, or Cards boxes.
Users can change some elements in the user interface by customizing Analyst's Notebook and
aspects of chart items. For example, color blind users and users with limited vision might want to
change the following elements:
• Color of invalid data
• Color aspects of item type definitions
• Font of the text on the chart
Related concepts
Customize Analyst's Notebook
You can customize Analyst's Notebook. You can set application options, and manage files and plug-
ins. You can also set up keyboard shortcuts and use utilities such as Series Import to import more
than one data file.
Modify item appearance
After you add an item to the charting surface, you can modify its appearance from the default style
that is specified by the chart. You can emphasize items on the charting surface, and present only the
most crucial data on the charting surface.
Related tasks
Changing the color of invalid data
When you enter invalid data into a field, the data is displayed in a specific color. You can choose which
color is used.
Related reference
Setting display options
Display options control the appearance of the chart surface. You can control the size of the grid,
background color, and link separation.
Item type definitions
Entity types and link types categorize the information on your chart and are part of a chart's
properties. If the existing item types are not suitable for your data, you can add or edit entity types
and link types.
Accessibility features
Analyst's Notebook uses standard Microsoft Windows navigation keys. There are multiple ways to
move around the user interface by using the keyboard.
Use the Tab and arrow keys to move through the interface and change focus.
You can also press Alt to activate keyboard shortcuts. When you press Alt, the application displays
keytips to indicate what keyboards shortcuts are currently available. Press Alt and then the
corresponding keyboard shortcut to complete an action.
The following table describes some common default keyboard shortcuts.
A list of more default keyboard shortcuts is given in the help. You can choose to customize these
shortcuts to your own preference.
Related reference
Keyboard shortcuts
Analyst's Notebook provides a set of default keyboard shortcuts for performing common tasks. You
can use the shortcuts to reduce the time you spend navigating the ribbon.
Keyboard shortcuts
Analyst's Notebook provides a set of default keyboard shortcuts for performing common tasks. You
can use the shortcuts to reduce the time you spend navigating the ribbon.
The shortcuts in Analyst's Notebook are:
Key Command
F1 Opens Help contents window
F2 Rename the selected chart item
F3 Find next text
F4, Ctrl+F Find text
Ctrl+F4 Close the current chart
Alt+F4 Exit Analyst's Notebook
F5 Visual Search
F6 Go to the next pane of a split window
Shift+F6 Go to the previous pane of a split window
Ctrl+Shift+F6 Go to the previous window of the current chart
F7 Check spelling
F8 Full Screen mode
F10 Display ribbon keytips
F11 List items
Accessibility 267
Key Command
Shift+0-9 Add members of set (0-9) to the selection
Related reference
Accessibility features
Analyst's Notebook uses standard Microsoft Windows navigation keys. There are multiple ways to
move around the user interface by using the keyboard.
Procedure
To assign a keyboard shortcut to a command:
1. Click File > Options, and then in the Options window click Customize > Keyboard.
2. In the list of tabs, expand a tab name to view a list of all the commands in that tab.
3. Select a command in the list. A description of the command is displayed beneath the list. Any
existing keyboard shortcuts are shown in the Shortcuts area.
4. Type the key in the Press New Shortcut Key box. As you press Ctrl or Shift, this part of the
keystroke is automatically added.
You cannot assign:
• The Alt key as part of the shortcut (except when it is combined with Ctrl). Alt is reserved for
access keys.
• The numbers 0 - 9, or Shift+, Ctrl+, Alt+ combinations with these numbers, as shortcuts. These
numbers are reserved for Selection Sets commands.
5. Click Add.
Note: If you type a key or key combination that is already used by another command, the
command to which this key is already assigned is displayed. You can continue to add this
keystroke, but ensure that you remove it from the original command.
6. Click OK.
Results
The shortcut can now be used. If you no longer require a particular shortcut, you can use Remove.
Alternatively use Reset All to revert to the default shortcuts.
Infotips
When you hover over a chart item, an Infotip provides a summary of item data. You can configure
Infotips to display the information that is of greatest interest to you.
You can choose which properties Infotips display, and you can configure the order of some of the
information. For example, if you work with bank account data you might configure Infotips in the
following way:
• Display the Account Type attribute at the top of the attribute list.
• Sort the Linked To list of accounts by the value of their transactions with the account that you
hovered over.
If the item properties that you choose to display in Infotips contain hyperlinks, a small button appears
in the Infotip. You can click this button to open a single hyperlink. If multiple hyperlinks are contained
in the item properties, clicking the button opens a list for you to choose which hyperlink to open.
If you do not want to use Infotips, you can disable them and display tooltips instead. Tooltips contain
the item label. For links, tooltips also contain the labels of the linked entities and an indication of the
link direction.
Configuring Infotips
You can configure Infotips to display the information that is of greatest interest to you. You can
choose which properties Infotips display, and you can configure the order of some of the information.
Procedure
To configure Infotips:
1. Hover over an item on your chart to display an Infotip.
2. Click Configure in the lower right of the Infotip.
3. Select which properties to display in Infotips:
Cards Displays a summary and link for each card that is attached to the item.
Clicking the link displays the card.
Data Record Source Displays a list of the sources of the data records that are attached to the
Names item.
Data Record Displays the properties of each data record that is attached to the item.
Properties
4. Click OK to save your changes.
Procedure
To choose and order attributes:
1. Follow the appropriate step according to whether you want to configure attributes or analysis
attributes:
• To configure attributes, in the Configure Infotips window, click Select below the Attributes
check box.
• To configure analysis attributes, in the Configure Infotips window, click Select below the
Analysis Attributes check box.
A configuration window opens.
2. Click the arrows to move the selected attributes into the appropriate columns:
Option Description
Show these If a value for an attribute in this list is present on an item, the attribute
attributes first displays on the Infotip. To change the order of this list use Move Up and
Move Down.
Disabling Infotips
The Infotips displayed on the chart can be replaced with tooltips.
To disable Infotips and revert to tooltips, click the View tab, and then in the Show group, clear the
Infotips check box.
Custom icons
You can use your own images to supplement the icons that are provided with Analyst's Notebook. You
can assign custom icons to entity types and attribute classes.
Images must meet the following specification:
• Bitmap (.bmp) format
• 8-bit color depth
• Size as specified in Table 1
Pixels that are colored magenta (RGB 255,0,255) are rendered transparent.
To make your custom icons available for use, copy the images to the appropriate folders specified in
Table 1, then restart Analyst's Notebook.
Results
Custom semantic types are saved with your chart. Any custom semantic types that are not assigned
to chart items, chart item types, and attribute classes are lost when you save and close your chart. To
reuse custom semantic types in a new chart:
• Create a template based on your current chart and base your new chart on this template.
• Save your current set of custom semantic types in a new library file (.mtc file) which other Analyst's
Notebook users can load and use.
From the right mouse button Click and hold the right mouse button.
From the bottom menu bar Click the Drag Chart option from the bottom
menu bar.
From the Ribbon menu Select the View tab and highlight the Drag Chart
option with the cursor. Left-click to activate.
From the chart surface Right-click on the chart surface and select Drag
Chart from the menu.
From the space bar Press the space bar to toggle Drag Chart on and
off.
From the mouse wheel Press the mouse wheel to toggle Drag Chart on
and off.
Procedure
To manually select the user interface language:
1. If Analyst's Notebook is running, close the application.
2. From the Start menu, run the Analyst's Notebook language selector.
3. In the Language Selector window, select a language, then click Select.
Procedure
Click File > Options, and then in the Options window click Options > General.
Note: These options are global application settings and are not saved as part of a chart or template.
They persist until changed, regardless of what chart you are working on.
Option Description
Chart as OLE Copies a picture of the chart to the clipboard. You can then paste it into another
Object application and still open and edit it in Analyst's Notebook
Picture as Copies a picture of the chart to the clipboard as a Windows metafile (.wmf). When
Metafile you paste the copied chart into another application, it is no longer 'live'. It shows a
picture of the chart when it was copied, but cannot be edited or opened as a chart.
Metafiles contain both vector and bitmap information. Vector information is a series
of instructions that tell the computer how to re-create the graphic. Bitmap
information stores the graphic as a series of pixels.
Picture as Copies a picture of the chart to the clipboard as a bitmap (.bmp). It no longer
Bitmap behaves as a chart but displays a picture of the chart when it was copied.
Most applications can handle bitmaps without problem, but might not handle
metafiles.
Procedure
To enable the creation of a hyperlink:
1. Select the Enable check box to enable the automatic hyperlink creation feature.
2. From the Color list that is displayed beneath the Enable check box in the Hyperlinks area, select
the color to use to display a hyperlink.
Procedure
Clear the Enable check box in the theme line icon bar area.
You can specify the color of the theme line icon bar. Select the color to use from the color picker.
Procedure
Select the Advanced Analysis check box to make analysis attributes available in:
• Visual Search
• List Items
• Find Path
• Combine Attributes
Procedure
1. Click File > Options to open the Options window.
2. Click General and look for the check box next to Animated Zoom Effect.
3. If the box is checked, you must clear it to turn off animated zooming.
4. Click OK.
Results
The animated effect is removed from the zoom option on all charts. This setting persists until
changed, regardless of the chart you are working on.
Procedure
Select the Drag Hand Throws Chart check box.
Procedure
Select the High Quality Drawing Mode check box so that the drawing uses a high quality.
Procedure
1. Click File > Optionsto open the Options window.
2. Click General and look for the check box next to Drag Selects Only Fully Enclosed Items.
3. If the check box is clear, you must select it to change the behavior of drag selection.
4. Click OK.
Results
The behavior of drag selection changes for all charts. This setting persists until changed, regardless of
the chart you are working on.
Procedure
Click File > Options, and then in the Options window click Options > User Interface.
Note: These options are global application settings and are not saved as part of a chart or template.
They persist until changed, regardless of the chart on which you are working.
Procedure
To change the color that invalid data is displayed in, select a color from the Error Text Color list.
Procedure
1. Click File > Options, and then in the Options window click User Interface.
2. Look for the check box next to Animate Auto Hide. You must select the check box to activate
animated auto hide or clear it to remove the animated effect.
Results
The change takes effect immediately and persists until you change it again, regardless of the chart
you are working on.
Option Description
Show names and Displays the entire tooltip, including the name, enhanced information,
descriptions and any contextual links to the help.
Show names Displays only the name that describes the feature. Enhanced
information and contextual links to the help are not shown.
Do not show No tooltips or links to the help are displayed.
Option Description
New Icons New and existing charts use the latest, high-quality icons.
Legacy Icons New and existing charts use the icon set available in releases before Analyst's
Notebook v8.5
As Saved in Chart By default, existing charts use the icon set that is selected in the chart last time
it was saved. New charts use the latest, high-quality icons.
Note: You might want to override the application-level setting for the chart you are currently working
on. To do this step, select As Saved in Chart and then change the icon set that is selected in the
Icons page of the Options window.
You can open charts that contain new icons in earlier versions of Analyst's Notebook. The new icons
cannot be displayed and are represented by legacy icons, but the new icons are not overwritten if you
save the chart in versions later than Analyst's Notebook 6.
Note: If you save a chart that contains new icons in Analyst's Notebook 6, they are replaced and
saved as legacy icons.
Procedure
• To save custom icons so that they are embedded within the charts that use them, select the Save
Custom Icons in Charts check box. If you clear this check box, other users see default icons
instead of the custom icons. By default, this option is selected.
• To extract custom icons from charts that you open, select the Extract Custom Icons from Charts
check box. By default, this option is selected.
Related concepts
Custom icons
You can use your own images to supplement the icons that are provided with Analyst's Notebook. You
can assign custom icons to entity types and attribute classes.
Procedure
Click File > Options, and then in the Options window click Customize > Panes. Change the visibility
or reset the visibility, position, and size of panes:
• To display or hide a pane, select or clear the check box next to the relevant pane. When you display
a pane, it appears at the size and position it was last displayed.
• To set the visibility, size and position of a single pane back to its default setting, select the pane and
click Reset.
• To set the visibility, size and position of every pane back to their default settings, click Reset All.
Attention: You cannot undo the outcome of the Reset functions. Before you click Reset All,
make sure that you want to reset every pane.
Procedure
Click File > Options, and then in the Options window click Options > Save.
Note: These options are global application settings and are not saved as part of a chart or template.
They persist until changed, regardless of what chart you are working on
Option Description
Do not Display When Prevents the cover sheet from being displayed every time that you
Saving save a chart.
Displays on First Save Displays the cover sheet on the first save of a new chart. This option is
the default.
Display on Every Save Displays the version of the cover sheet every time you save a chart.
This option displays the read-only version of the cover sheet on opening a chart. It is set only on the
editable version of the cover sheet, which is displayed by using either these options or by clicking File
> Cover Sheet.
Procedure
1. Click File > Options, and then in the Options window click Options > Save
2. Select the Auto Save check box and enter the time period in minutes. The default auto save option
is set to save every five minutes.
3. Select the folder in which you want Analyst's Notebook to keep the temporary files. Preferably
choose a folder on your local hard disk, typically the C: drive.
4. Click OK.
Results
All your open charts are saved automatically at the time interval you specified.
Note: Automatically saving your chart does not display the Cover Sheet. It is displayed only when you
click File > Save or File > Save As, or the On Save check box is selected in the Chart Properties
window.
The auto save files are only restored when you start Analyst's Notebook after a failure. They are
deleted when you close Analyst's Notebook normally. If you want to keep these charts, you must save
them normally before you close Analyst's Notebook.
Archiving charts
For backup and record-keeping, you can configure the Analyst's Notebook archiving feature to make a
separate copy of your chart every time you save it. You can decide how many copies to retain, and
whether the application monitors their integrity.
Procedure
1. Click File > Options, and then in the Options window click Options > Save
Results
Every time that you save an open chart, a backup copy is saved in an i2 Chart Archives folder, up to
the maximum number you specified.
Template Description
Standard template The template that is used as the basis for a new chart when you click File
(Standard.ant) > New > New Standard Chart.
Flag template A local template that contains only flag icons. Local templates are
(Flag.ant) selected in the New From Template window, which opens when you
click File > New > New from Template.
Report specification This file contains six standard specifications for generating reports by
(Reporter.rep) using the Reporter. The report specifications in this file can be used when
you click the Publish tab and then click Reports.
As you use Analyst's Notebook you might update the template files. For example, you, might add new
entity types, or when you want to create new report specifications. You might also move the location
of some files. For example, to create central server copies for regular backups, or when you want to
share templates and specifications with other users in your group.
Managing your files means that:
Option Description
Use the updated Creates a backup copy of your edited file with the name Backup <n> of
<file name> (the <file name> in a Backup directory (for example, for templates,
old file is backed C:\Documents and Settings\<user name>\Templates\Backup), and
up) overwrites your edited file with the latest version.
Keep the existing Ensures that your edited version of the template or specification file is not
<file name> overwritten and remains available for use with your latest version of Analyst's
Notebook. If you choose this option while you update the Standard template or
Report specification, you can reset these files with the installed versions later
by using the Templates and Reporter pages of the Options window.
Procedure
To reset the current Standard template with the installed version of the template:
1. Click Reset in the Standard Template File area. The Reset Standard Template File window is
shown. Note Reset is only available when either a more recent version of the template is installed
(but you chose not to use it) or you edited the current installed version.
2. You can click Details on the Reset Standard Template File window to read a description of what
happens when you reset the file.
3. Click OK. The latest version of the Standard template is installed to its default location.
Procedure
To change the location of your report specification:
1. Click Reset. The Reset Specifications File window is shown. Reset is only available when either a
more recent version of the specification file is installed (but you chose not to use it) or you edited
the original copy.
2. You can click Details on the Reset Specifications File window to read a description of what
happens when you reset the file.
3. Click OK. The latest version of the specification file is installed to its default location.
Updating files
When you upgrade Analyst's Notebook to the latest version, old files are overwritten, and new files
are installed automatically. However, if you change the contents of your original installed templates
or specifications between versions, a Replace window is shown when you first start Analyst's
Notebook.
You must select one of two options before you can update a file:
Option Description
Use the updated Creates a backup copy of your edited file with the name Backup of <file
<file name> (the old name>, and overwrites your edited file with the latest version.
file is backed up)
Keep the existing Ensures that your edited version of the template or specification file is not
<file name> overwritten and remains available for use with your latest version of Analyst's
Notebook. If you select this option when you update the Standard template
or Report specification, you can reset these files with the installed versions
later by using the Options window that opens when you click File > Options.
Component Description
Standard Standard components are provided by IBM and are present as part of the standard
Analyst's Notebook software. Standard components are identified in the Author box
by the phrase:
Component authored by IBM
Some standard components are by loaded when the application starts. Others are only
loaded when required, such as the Visual Search component.
Extensions Extensions are third-party plug-ins that are not part of the standard Analyst's
Notebook product. For more details about an extension, select it in the list and read
the information in the License box.
Procedure
To specify available and unavailable plug-ins:
• To enable a plug-in, select the plug-in in the displayed list, and select the Load on Startup check
box.
• To disable a plug-in, select the required plug-in and clear the Load on Startup and Protect
against Plug-in Failure check boxes
• You also select the Protect against Plug-in Failure check box to allow Analyst's Notebook to load
properly even if the plug-in fails to load. The plug-in can then be reported in the Failed area when
Analyst's Notebook is up and running.
A
abstract semantic type
A semantic type that only serves as the parent of other semantic types. Abstract semantic types
categorize their child semantic types, but are never associated with real data.
aligned value
A value that is used to interpret equivalent native values from different data sources. For example,
the value Male can be used to align the native values M or Ma.
analysis attribute
A characteristic or trait pertaining to a chart item. Analysis attributes are never displayed on
charts.
association chart
A chart that highlights the relationships between entities, rather than a chronology of events, by
arranging data in a manner that emphasizes particular associations.
attribute
A piece of information that is associated with a chart item, such as a date of birth or an account
number. An attribute is represented by a symbol, or a value, or both, that is displayed with the
chart item.
attribute class
A descriptor of the characteristics of an attribute, including the type of its values, how its values
are displayed, and the treatment of its values when they are merged or pasted on a chart.
attribute entry
An attribute with a preset value that can be associated with a chart item.
attribute instance
A single use of an attribute on a chart item.
authority
A measure of how well-connected an entity is, based on its inbound links. Authority is one of two
eigenvector centrality measures used in social network analysis. See also centrality, eigenvector.
automatic attribute
An attribute that is created automatically by the application and added to a chart item.
C
card
A record of information attached to an item. An item can have multiple cards.
centrality
The relative importance of one entity compared to other entities in social network analysis, as
determined by its relationships. See also authority, betweenness, closeness, degree, eigenvector,
hub, social network analysis.
chart
A visual representation of real-world objects, such as organizations, people, events, or locations,
and the relationships between them.
chart fragment
A view of a chart that highlights particular items of interest.
chart property
A characteristic of a chart, such as its summary description, time zone, grid size, background
color, or merge and paste rules. Chart properties are saved with the chart. See also chart
template.
chart template
An object that is used for chart creation that contains preconfigured chart properties, and lists of
permitted entity types and link types. See also chart property.
child
In a generalization relationship, the specialization of another element, the parent. See also
parent.
circle
An entity representation that can indicate an organization or a group on a chart. A circle is often
used to enclose other entities. See also box, representation.
circular layout
A layout in which entities are arranged by type around the circumference of a circle. See also
layout.
D
degree
A measure of how many direct relationships an entity has with other entities on an association
chart. Degree is one of the centrality measures used in social network analysis. See also
centrality, root entity.
directed connection
A connection between entities in which links that are in the same direction are represented as a
single link on a chart. See also connection.
Glossary 287
diverted theme line
A theme line that is attached to an event frame such that when the event frame is moved, the
theme line maintains its vertical position with respect to the frame. See also event frame, theme
line.
E
eigenvector
A measure of how well-connected an entity is, based on its inbound and outbound links.
Eigenvector is one of the centrality measures used in social network analysis. See also authority,
centrality, hub.
end
An entity that is attached to a link. See also end constraint.
end constraint
A constraint on the types of entities that can be the end of a particular link. See also end, valid end
type.
entity
A set of details that are held about a real-world object such as a person, location, or bank
account. An entity is a kind of item.
entity semantic type
A semantic type that can be assigned only to an entity or an entity type. See also semantic type.
entity type
A descriptor of the characteristics of an entity, including the properties it can contain and its
appearance in visualizations.
event frame
An entity representation that emphasizes date and time information. An event frame is often used
in conjunction with theme lines. See also diverted theme line, representation.
expansion
A process that searches for entities within a data source that are directly related to some selected
entities.
F
free item
A chart item that is not ordered. Free items can be moved anywhere on the chart. See also
controlling item, ordered item.
G
gatekeeper
An entity with a high measure of betweenness that may control the flow of information among
other entities on an association chart. See also betweenness.
H
heat map
A graphical representation of data values in a two-dimensional table format, in which higher
values are represented by darker colors and lower values by lighter ones.
hierarchical layout
A layout in which entities are arranged to show organizational structures. See also layout.
histogram
A graphical display of the distribution of values for a numeric field, in the form of a vertical bar
chart in which taller bars indicate higher values. See also histogram filter.
histogram filter
A filter that changes the appearance of a chart. When a histogram bar is selected, items that
match the conditions defined by that bar are selected, while items that do not are hidden. See
also histogram.
hub
A measure of how well-connected an entity is, based on its outbound links. Hub is one of two
eigenvector centrality measures used in social network analysis. See also centrality, eigenvector.
I
icon
An entity representation that consists of a stylized image and an optional label. See also
representation.
import design
A specification of how data from an external source will be transformed into chart or repository
items during an import procedure.
item
An entity or a link. Items are characterized by the values of their properties. See also merged
item, ordered item.
Glossary 289
L
layout
The arrangement of items on a chart. See also circular layout, compact peacock layout, grouped
layout, hierarchical layout, minimize crossed links layout, peacock layout.
line strength
An indication of confidence in the information underlying a particular link. Line strength is
represented as a solid, dashed, or dotted line on a chart.
link
An association between two entities, such as an ownership relationship between a person and a
vehicle.
link direction
An indication that the meaning of a link is different for each of its ends. For example, the direction
of a telephone call makes one end the caller and the other the recipient. Link direction can
influence the centrality measures used in social network analysis.
link semantic type
A semantic type that can be assigned only to a link or a link type. See also semantic type.
link separation
The distance between adjacent links in a connection on a chart.
link type
A descriptor of the characteristics of a link, including the properties it can contain and its
appearance in visualizations.
M
match
The part of a result that met a condition during a search operation. A search can yield a perfect
match or a partial match.
merged item
An item that is created by merging the information held in two or more items. See also item.
minimize crossed links layout
A layout in which entities are arranged in a configuration where the fewest number of links
overlap. See also layout.
multiplicity
See connection multiplicity.
N
network chart
See association chart.
P
parent
In a hierarchy or auto-level hierarchy, a member that has one or more child members at the level
immediately below.
path
A route on a chart between two entities. A path may include intermediate entities.
peacock layout
A layout where complex groups of linked entities are arranged to show the structure of
associations. It is most suitable for charts with many linked entities. See also layout.
property
A container for a single piece of information about an item.
property semantic type
A semantic type that can be assigned to a property type, a property in a data record, or an
attribute class. See also semantic type.
property type
A descriptor of the characteristics of a property, including the type of information it can contain.
proportional
Pertaining to an area of a chart in which the horizontal distances between items have a linear
relationship with the time differences between them.
R
representation
The form in which an entity is represented on a chart. See also box, circle, event frame, icon,
theme line.
root entity
An entity in a grouped layout that has the highest degree centrality in its group. Depending on the
data, there can be more than one root entity. See also degree.
S
semantic type
A category that defines the real-world meaning of data, and therefore how applications should
interpret that data. For example, Person is a semantic type that could be assigned to entity types
Glossary 291
such as Male, Victim, and Witness. See also entity semantic type, link semantic type, property
semantic type.
snapshot
A stored version of a chart that preserves its contents and layout at a particular stage of its
development.
social network analysis
A method of analyzing the structure of social relationships that uses mathematical metrics to
make claims about social organization and social dynamics. See also centrality, weight.
style segment
A section of a theme line between adjacent items to which color and strength can be applied.
T
theme line
An entity representation that shows the interactions of an entity over time. A theme line can be
used with event frames. See also diverted theme line, representation.
theme line extent
The distance between the beginning and end of a theme line
theme line wiring
The manner in which a theme line diverts from a horizontal trajectory in order to pass through and
travel between event frames.
timeline chart
A chart or a portion of a chart that shows a chronology of events. For example, a series of
meetings that occur over several days, or a set of transactions that occur over a period of time.
V
valid end type
An entity type that conforms to the end constraints of a particular link. See also end constraint.
W
weight
A value that is added to a link on an association chart, to represent its importance relative to other
links. Weight can influence the centrality measures used in social network analysis. See also
social network analysis.
weightings file
A file that contains information that can apply weighting values to links on a chart.
wiring segment
The section of a theme line between adjacent diverting event frames.
Trademarks
IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business
Machines Corp., registered in many jurisdictions worldwide. Other product and service names might
be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at
"Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.
Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or
trademarks of Adobe Systems Incorporated in the United States, and/or other countries.
Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in
the United States, other countries, or both.
Java™ and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle
and/or its affiliates.
ArcGIS, EDN, StreetMap, @esri.com, and www.esri.com are trademarks, registered trademarks, or
service marks of Esri in the United States, the European Community, or certain other jurisdictions.
Other names may be trademarks of their respective owners. Other company, product, and service
names may be trademarks or service marks of others.