Use the Project Dashboard

Selected Project > Dashboard

When a Project opens, the Dashboard gives you the option to generate and view key reports for your Project Data (assuming you have permission to do so). By default, the three dashboard reports are disabled, but you can enable generation of the reports when you want to view the report information.

After you start working in the Project, you can return to this summary by clicking the Dashboard item in the tree.

Note: The Dashboard is anchored at the top of the Navigation Tree is not subject to scrolling. In Projects with many nodes in the tree, having the Dashboard anchored makes it easier for you to use the Dashboard tree options without having to scroll. In the tree, the Dashboard provides options such as for Find in Navigation Tree, for Refresh of the Navigation Tree, and , which enables you to control display of the Navigation Tree (hide it or show it). You can also hide the tree by clicking the left arrow shown in the divider bar to the right of the tree contents, and when the tree is hidden, you can also click the right arrow shown in the divider to the right of the tree contents.

The Dashboard contains three reports generated using the Enable Dashboard Reports option:

  • Document Types
  • Document Classification
  • Email Sent Date

Note: The Dashboard reports are exclusively controlled by the Enable Dashboard Reports option; they are not controlled by the enabled or disabled state of these three reports for Project Data in the Project Report Settings.

Report Toolbar Options

The toolbar enables you to update the reports or view all reports for your Project Data. Options include the following:

  • If you have Audit Access permissions, you can view and click Audit Log to view the Project Audit Log.
  • If you have Audit Access permissions, you can view and click Generate Billing Report to generate and then download the Project Billing Report.
  • If you have Audit Access permissions, you can view and click Generate Source Tracking Report to generate and then download the Source Tracking Report for the Project. This report enables you to view statistics about all imported data, broken down by batch, then mediaid, and then custodian.

Note: When you are managing data for generation of the Source Tracking Report, be careful to avoid creating mismatches between the Data Set metadata fields custodian, mediaid, and batch and their respective Analytic Metadata fields custodian_view, mediaid_view, and batch_view in Project Data. Mismatches may cause inaccurate metrics in this report.

  • If you have Audit Access permissions, you can view and click Generate Processing Report to generate and then download the Processing Report for the Project.
  • If you have Project - Preferences - Add/Edit permissions, you can clickthe Enable Dashboard Reports checkbox to enable the dashboard reports in the Project (that is, have these reports generated for the Project based on the available data in the Project ). By default, the dashboard reports are disabled, which can save Project users time (for example, in a large Project, the reports may take time to generate when users enter the Project). This checkbox option is generally available to all eDiscovery users who can see Project Data (that is, an Organization Administrator, Project Administrator, or Project Member).
  • Click Update to update the Project Dashboard reports, if the reports are enabled.

How to Use the Charts

When the Dashboard reports are enabled, you can use the charts to get additional information for Project Data. The charts offer a number of viewing options.

Drill-through Support

You can generally use the drill-through capabilities to get additional information, as follows:

  • Double-click to generate an additional view that focuses on the information you selected. You can drill-through a particular entry in a report, such as the Document Types pie chart section or entry in the legend. When you drill through a section, an additional search is generated, and a task is generated in Work Basket for this new view. The document list launches automatically to list the documents based on the section into which you drilled.
  • For the Email Sent Date report on the Dashboard, you can also click once to drill-down a given entry to focus on a particular date selection.

Disabled Reports

Any report that has been explicitly disabled in the Report Settings is identified in the Reports tab as Report Disabled.

Reports without Data to Display

Any report for which there is no data to display is identified on the Reports tab as No Data to Display.

Hover Text Support

  • You can hover over any bar, pie, or column section to get more information about that section.

View by Count or Size

  • The Document Types report on the Dashboard supports Count or Size. You can select either Count or Size, depending on which one is already active. For example, if Size is active, you can select Count.

Chart Download Support

  • If you have Document Reports permission, you can click , located at the top right of a chart, to download the appropriate file (mostly CSV).

  • Some charts may take time to download. During report downloads, a message will appear at the top of the screen to notify you about the number of downloads in progress. You can hover over the in-progress message to see the individual downloads in progress.

View Chart Details

  • For most charts in this report (except Document Classification), you can click at the top right of a chart to view a Details pop-up with the document count and size information for the appropriate items. The Details pop-up for a chart supports a Document drop-down menu with Add Tags, Remove Tags, Add to, and Remove from actions. For most charts, viewing report Details shows you the name, count, and size of documents for an item, such as a Tag, Date, or Custodian. Some Multi-Tab Details, for example, Document Type Details, provide multiple tabs of information.

Document Types

By default, this report shows you the information based By Size (descending order) in GB, MB, or KB, depending on the size of the data.

Note: The Document Types report provides information to the Billing Summary.

The document types are categorized as follows:

  • Disk Images – The total number or size of documents that are disk images, such as a Logical Evidence File (LEF) or Expert Witness Compression Format File (for example, for EnCase, an E01). See Container Files for a complete list of disk image types. By default, disk images are excluded from Data by an Exclusion Search.
  • Email Archives – The total number or size of documents that are email archives (email container files such as PST, OST, NSF found on disk). See Container Files for a complete list of email archive types. By default, email archives are excluded from Data by an Exclusion Search.
  • Email Messages – The total number or size of all email documents, including loose emails (such as msg or eml files), emails from an email archive, or email attachments. Documents that are not identified as emails, such as email archives (email container files), are not counted in this category.
  • File Archives – The total number or size of documents in that have a compressed type or file archive type (for example, GZIP, ZIP, RAR, and TAR). See Container Files for a complete list of compressed types and file archive types. By default, compressed and file archive types are excluded from Data by an Exclusion Search.
  • Images – The total number and size, in MBytes (MB), of files identified as image files (supported image types, such as PNG, JPEG, and TIFF). For a list of supported file types, see Supported File Types for Analysis.
  • Office Files – The total number or size of Microsoft Office documents (including Microsoft Office supported file types and versions, such as Microsoft Word, Excel, PowerPoint, Write, and Works). For a list of supported file types, see Supported File Types for Analysis.
  • PDF – The total number and size of documents in Adobe Acrobat (PDF), Adobe Indesign, or PDF Image format.
  • Other – The total number or size of documents that do not fall into any of the other categories (for example, a Text 7-Bit File, Internet HTML files, and directories (by default, directories are excluded from Data by an Exclusion Search).
  • Unknown – The total number or size of documents that are of a type not recognized by the system (for example, the Unknown format file type).

— If you have permissions, you can optionally download the detailed document type report information (the file types) to a CSV file (FILETYTPE.csv). When you select this option, you are prompted to confirm or name the CSV file, and you can select the directory to which you save the file.

  • The File Type tab provides a list of the official file types, such as Internet HTML or Adobe Acrobat (PDF). Clicking will download a FILETYTPE.csv with the information.
  • The File Extension tab provides a list of the extensions for the files (for example, txt, pdf, and docx). For text/plain and unknown file types, the file extension is the actual extension of the file; for all other file types, the file extension is the standard extension associated with that file type. Not present represents files for which there is no discernible extension (for example, a directory does not have an extension). A blank entry indicates that the file had an empty extension (for example, just a space). Clicking will download a DOCEXT.csv with the information.
  • The Exceptions tab provides a list of extension exceptions to provide information about what would be affected if you decide to change the current file extension to the recommended extension. This chart provides columns for the Current extension, the Recommended extension, as well as the Count and Size. The default sort order is by Count. Clicking for this tab will download a DOCEXT_CONFLICT.csv with the information.

Document Classification Chart

This chart shows how document classification can help you reduce the amount of content for review. The values are based on the sum of all data added to this view.

Document Classification Information

The Document Classification chart provides key count and size information based on document class.

Important Notes:

Note: For an all Imports or Data Set view, the values shown in this chart will reflect file MD5 deduplication, since the Deduplication Settings under Analytic Settings and calculations based on family membership apply only to views of Data (and initially calculated when data is added to Data by a user with Permissions).

  • For document classes subject to deduplication, the deduplicated count and size values are calculated and displayed according to the appropriate Deduplication setting (under Analytic Index Settings), either the default of Global or Custodial). This setting, which applies for Data and views of Data, determines the processing of email, reporting of de-dupe counts and size, and how email is handled for an Export that includes duplicates.
  • The Document Classification chart title and the title displayed in the downloaded CSV for the chart identify which deduplication setting is being used to calculated the counts (for Dedupe Setting: Global) or (for Dedupe Setting: Custodial). If you change the de-dupe mode after initially generating the report, you must click Update to recalculate based on the new setting.
  • The deduplication is calculated based on document class and family membership (MAG or DAG). For example, if the same Word document serves as a Message Attachment to two different email msgs, it is counted twice, once per message family.

Note: Keep in mind that reports will only be accurate if you keep the Families intact when running searches and saving documents to different views. This means that you must keep the Include Families checkbox enabled to ensure that Families remain intact.

  • The entries in the table now support the double-click drill-through capability.
Document Class Count Size Deduplicated Count Deduplicated Size
Container Files

The number of Container files (Archives, Message Archives, and Disk Images) in the view.

The size (by default, in bytes) of Container files in the view.

Container files are not subject to this deduplication analysis; therefore, this column is empty. Container files are not subject to deduplication.
Directories The number of directories in the view. The size (by default, in bytes) of directories in the view. Directories are not subject to this deduplication analysis. Therefore, for directories, this column will be empty. Directories are not subject to this deduplication analysis. Therefore, this column will be empty.
EDOC OLE Attachments The number of EDoc OLE attachments in the view. The size of EDoc OLE attachments in the view. The count of EDoc OLE attachments in the view after deduplication (based on family membership). The size (for example, in GBytes) of EDoc OLE attachments in the view after deduplication (based on family membership).
Message Attachments The number of message attachments in the view. The size (by default, in bytes) of message attachments in the view. The count of message attachments in the view after deduplication (based on family membership). The size (for example, in GBytes) of message attachments in the view after deduplication (based on family membership).
Messages The number of messages in the view. The size (by default, in bytes) of messages in the view. The count of messages in the view after deduplication. The size (for example, in GBytes) of messages in the view after deduplication.
Message OLE Attachments The number of Message OLE attachments in the view. The size of Message OLE attachments in the view. The count of message OLE attachments in the view after deduplication (based on family membership). The size (for example, in GBytes) of message OLE attachments in the view after deduplication (based on family membership).
NIST EDoc Files The number of EDocs that are NISTClosed The National Institute of Standards and Technology (NIST), which provides the National Software Reference Library (NSRL). The NSRL includes a Reference Data Set of digital signatures for known, traceable software applications. The list is used to identify files with no evidentiary value. Digital Reef provides the NSRL database to support detection of files with signatures (hash codes) matching those in the NSRL database upon import. DeNIST refers to the removal of any file that has a digital signature matching one in the NIST NSRL list. files in the view. The size (by default, in bytes) of EDocs that are NIST files in the view. NIST EDOC files are not subject to this deduplication analysis; therefore, this column is empty. NIST EDOC files are not subject to deduplication; therefore, this column is empty.
Non-NIST EDoc Files The number of non-NISTClosed The National Institute of Standards and Technology (NIST), which provides the National Software Reference Library (NSRL). The NSRL includes a Reference Data Set of digital signatures for known, traceable software applications. The list is used to identify files with no evidentiary value. Digital Reef provides the NSRL database to support detection of files with signatures (hash codes) matching those in the NSRL database upon import. DeNIST refers to the removal of any file that has a digital signature matching one in the NIST NSRL list. EDocs (that is, EDocs that are not NIST files) in the view. The size (by default, in bytes) of non- NIST EDocs in the view. The count of non-NIST EDocs (that is, EDocs that are not NIST files) in the view after deduplication. The size (for example, in GBytes) of non-NIST EDocs (that is, EDocs that are not NIST files) in the view after deduplication.
Total Documents The total number of documents in the view. The total size (in bytes) of documents in the view. Calculated regardless of whether the values for Directories, Container Files, and NIST EDocs are 0. Calculated regardless of whether the values for Directories, Container Files, and NIST EDocs are 0.

About the Downloaded Document Class CSV File

You can name and download the Document Classification table as a CSV file. The file contains additional entries, including a top entry for Total Documents. The CSV entries use the document class name, where applicable. Entries for directories, archives, message archives, and disk images will not show counts in views of Data as long as the uses the default set of Exclusion Searches. However, for the Imports view, or for a Data Set Scan Report view, these entries will report counts.

Note: All entries in the CSV file report Count and Size values. For document classes that support deduplicated count and size values, you will also see values populated in columns representing the Deduplicated Count and Deduplicated Size.

  • Total_Documents — The total document count and size for the view.
  • EDoc — The count and size of EDocs in the view.
  • Non-NIST_EDoc — The count and size of non-NIST EDocs in the view. For this entry, the Deduplicated Count and Deduplicated Size columns report the count and size of non-NIST EDocs in the view after deduplication.
  • EDoc_OLE_Attachment — The count and size of EDoc OLE Attachments in the view. For this entry, the Deduplicated Count and Deduplicated Size columns report the count and size of EDoc OLE Attachments in the view after deduplication (based on family membership).
  • Message — The count and size of Message Families (MAGs) in the view. For this entry, the Deduplicated Count and Deduplicated Size columns report the count and size of messages (Message Families, or MAGs) in the view after deduplication (based on family membership).
  • Non-NIST_Message_Attachment — The count and size of non-NISTClosed The National Institute of Standards and Technology (NIST), which provides the National Software Reference Library (NSRL). The NSRL includes a Reference Data Set of digital signatures for known, traceable software applications. The list is used to identify files with no evidentiary value. Digital Reef provides the NSRL database to support detection of files with signatures (hash codes) matching those in the NSRL database upon import. DeNIST refers to the removal of any file that has a digital signature matching one in the NIST NSRL list. Message Attachments in the view.
  • Message_Attachment — The count and size of all Message Attachments in the view. For this entry, the Deduplicated Count and Deduplicated Size columns report the count and size of Message Attachments in the view after deduplication (based on family membership).
  • Directory — The count and size of directories in the view (for example, the Imports view or a Data Set Scan Report view).
  • NIST_EDoc — The count and size of EDocs that are NIST files in the view.
  • Message_OLE_Attachment — The count and size of Message OLE Attachments in the view. For this entry, the Deduplicated Count and Deduplicated Size columns report the count and size of unique Message OLE Attachments in the view after deduplication (based on family membership).
  • Archive — The count and size of files that are File Archives or in compressed format in the view (for example, a GZIP, ZIP, RAR, or TAR file found on disk). This entry applies to a view that includes archive files (for example, the Imports view or a Data Set Scan Report view).
  • Message_Archive — The count and size of Message Archives in the view (for example, the Imports view or a Data Set Scan Report view).
  • NIST_Message_Attachment — The count and size of Message Attachments that are NIST files in the view.
  • Disk_Image — The count and size of Disk Images in a view that includes disk images (for example, the Imports view or a Data Set Scan Report view).

Note that NIST information is reported in the kftdesc metadata field.

Email Sent Date

The Email Sent Date histogram enables you to see the volume of files associated with a range of email sent dates. This can help you make decisions about emails that need to be reviewed more carefully based on the date they were sent and how much email was involved (for example, you may focus on a large volumes of emails sent 9 months ago).

Note: The Date report document counts are calculated differently than the Email Sent Date (or Email Received Date) report. The Date Report counts include each document in each family, while the Email Sent (or Email Received) counts include one document per family.

Email Sent Date Options

The Email Sent Date report provides a number of options that enable you to work with start and end ranges. You can either use the start and end dates in effect when you initially view the report (which is derived from the earliest and latest dates for the view), or you can specify your own start and end dates.

On the left:

Date Range:

  • Start YYYY-MM-DD – Enables you to type a start date in the box or click the Calendar icon to use a calendar to specify zero-day email sent date criteria.
  • End YYYY-MM-DD – Enables you to type an end date in the box or click the Calendar icon to use a calendar to specify zero-day email sent date criteria.
    1. To use the Calendar, click the icon to the right of the Start or End box.
  1. Click the date you want, either the current date or the date you typed (highlighted for you), or select another day in the current month.
  2. Click the left or right arrows in the top corners on either side of the month name to move back and forward a month.
  3. Click the month and year in the center, and then use the arrows to go back and forward a year. You can also select another month in the year shown.
  4. Once you make a complete date selection, the Calendar closes and you see the date formatted properly in the box.
  • Apply – Click this button to have the report load the data for the time period specified. Pressing a return after entering a date in the Start or End box also loads the information.
  • Reset – Click this button to have the report reset to the originally displayed date range (the default start and end date for the report).

On the right:

  • Previous Period – Moves the histogram information to the previous period. The period of time is dictated by your Start and End zero-day dates.
  • Next Period – Moves the histogram information to the next period. The period of time is dictated by your Start and End dates.

Chart Download, Zero Day Details, and Details Options

If you hover over a date block in the Email Sent histogram, you will get a summary of the information for the block. For example, the hover text for the bar of a 2008 entry in the Email Sent histogram might display 2008 (113). You can click once on a sent or received date block to drill down and get more date information for that sent or received date block. You can also double-click to drill through an item in the report. Also, from either the Email Sent Date histogram, you can click the following:

  • — Enables you to download all available information to a CSV. The CSV always contains all available data (the data initially shown in the chart based on the earliest and latest dates found in the view). The CSV content does not change based on your selected start date or end date.
  • — Displays a Details popup with more information about the documents in the time period currently shown in the chart.
  • — Displays a Zero Day Details popup that enables you to select and view zero-day dates for which there was no document processed). You have the option hide weekend days.