Abstract: An apparatus for analyzing grouped incidents belongs to a group having the group (grouped incidents, grouped sources, a grouped incident tag) and group interface (grouped incidents panel, a group visualization panel). The group visualization panel has an incident visualization panel. The incident visualization panel has an incidents area displaying an incident graphic visually representative of the incident information of the grouped incidents during an incident display period, an incident display period user control allowing the user to change the incident display period, an incident tag user control enabling the user to select the group incident tag to be a visible incident tag or to be a hidden incident tag, and a group timeline panel having a timeline sequence graphic representing a sequence of the grouped incidents and a display period graphic highlighting a portion of the timeline sequence graphic corresponding to the incident display period.

Abstract: Apparatus and method for investigating an analyzable incident for a period of time has a database to receive and store data sets, coupled to a data processing computer system that operates upon the data sets, and a display module comprising a graphical user interface (“GUI”). Each data set comprises a series of events comprising a timestamp, a source, and a content about the analyzable incident. The GUI comprises an event map, a control panel, and an annotation panel viewable in an event list view or a swim lane view. The event list view has a tabular list of the timestamp, source, and the content of each event. The swim lane view comprises a graphical representation of the timestamp and the source of each event, and a user selectable icon associated with the content of each event.

Abstract: Apparatus and method for investigating an analyzable incident for a period of time has a database to receive and store data sets, coupled to a data processing computer system that operates upon the data sets, and a display module comprising a graphical user interface (“GUI”). Each data set comprises a series of events comprising a timestamp, a source, and a content about the analyzable incident. The GUI comprises an event map, a control panel, and an annotation panel viewable in an event list view or a swimlane view. The event list view has a tabular list of the timestamp, source, and the content of each event. The swimlane view comprises a graphical representation of the timestamp and the source of each event, and a user selectable icon associated with the content of each event.