Investigation Bar

When viewing dashboards within , an Investigation Bar is visible at the bottom.

Begin an investigation

You can create a new investigation timeline by clicking Create a New Investigation

• Load an existing investigation timeline by clicking All Investigations and selecting a timeline.

Work an existing investigation

Load an existing investigation timeline into the bar by clicking All Investigations and selecting an investigation.

• Change the investigation name by clicking Edit Investigation Name.
• View the timeline of the investigation, or close it after you open it, by clicking Toggle Timeline.
• Add a note by clicking Notes.
• Add an item from your action history by clicking Action History.

Run a quick search

Run a search without needing to open the search dashboard by clicking Quick Search.

• Enlarge or shrink your view of the search results by clicking and dragging the corner of the window. Double click to expand the search view to cover most of your screen, or double click again to shrink it.
• Click Open in Search to view the search results on the Search dashboard.
• Click Export to export the search results as a CSV file. You can then add those search results as an attachment to the timeline. See Investigation Timelines.
• Quickly add the search to the investigation in the investigation bar by clicking Add to Investigation.