Object Details Viewer
The Object Details Viewer (ODV) is the primary widget used to inspect and work with individual objects in Workstation. It displays the full details of a single object—such as an event, notification, or collection—and provides access to related data, history, and available actions.
Most analytical workflows in Workstation involve sending objects to one or more Object Details Viewer widgets for focused review.
You can use multiple Object Details Viewer widgets within the same workspace to compare or investigate objects in parallel.
Sending Data to the Object Details Viewer
The Object Details Viewer displays content only after an object has been sent to it. Once loaded, the viewer adapts its layout and available tabs based on the type of object being viewed.
Supported Objects
The Object Details Viewer changes its behavior depending on the object loaded into it.
Events
When an event is loaded, the Object Details Viewer displays event-specific information across multiple tabs, including:
-
Details: Displays the event’s data fields and their values.
-
Collections: Shows the collections the event belongs to and allows adding or removing the event from collections.
-
Attachments: Displays any attachments associated with the event.
-
Drilldown: Visualizes the event’s provenance, showing the patterns and contributing signals that explain how and why the event was generated.
-
Link Analysis: Displays relationships between the event and other entities or events in a network-style view.
-
Map: Visualizes geospatial data associated with the event (when location information is available).
-
Event History: Shows a historical view of changes to the event, such as risk score updates over time.
Collections
When a collection is loaded, the Object Details Viewer allows you to review and manage the collection.
Common tabs include:
- Details: Displays collection metadata and summary information.
- Collections: Shows related collections, when applicable.
- Custom Fields: Displays and allows editing of custom fields defined for the collection.
- Items: Lists events that are attached to the collection.
Event Notifications
When an event notification is loaded, the Object Details Viewer displays notification details and provides actions to manage it, such as:
- Reviewing notification context
- Assigning the notification
- Dismissing the notification