Configuring records for map display - Security Center 5.10

If your record type has latitude and longitude fields, you can display its records on maps. A record can be represented as a pin or as a polygon on the map.

What you should know

The default representation of a record on a map is a blue pin identified by the first letter of the record type name. You can change the color of the pin and the image displayed over it. You can also represent a record as a colored shape. Clicking a map object representing a data record opens its information bubble.

1. On the Properties page of the Record Caching Service role, click the record type you want to configure.
2. Click the pull-down arrow beside Icon, and select one of the following:
   • Select image: Select an image to display inside the 32 x 40 pixel pin. A PNG image with transparent background works best.
   • Use expression: Enter a C# Eval Expression that resolves as a path to an image file. You can use this method to change the pin icon dynamically based on a field value.
   • Clear: Restore the default display.
3. (Optional) Turn on the Raise event when record cached option to raise the Record updated event when new record of this record type is ingested, meaning saved to the record cache.
   Record caching occurs when you add a record on a map or import multiple records from a flat file..

   For the system to raise and event when a record is cached, the following conditions must be met:

   • The record type must contain a field assigned to the Timestamp function.
   • The record type must contain a field assigned to the Location function, or a pair of fields assigned to the Latitude and Longitude functions.
   • The record type must be associated to a georeferenced map. The area entity associated to the map is used as the source entity of the event.

   NOTE: For a data ingestion event to be displayed on the map when it occurs, at least one geofence must be defined on the map.

   To add a geofence, add an area entity represented by a polygon to the map. When a new record is ingested, the system checks whether it is found within the boundaries of an area on the map. If it is, a second Record updated event is raised, and the area in which the ingested data is found is used as the source entity of that event.

4. Select the appearance of the map object.

   None

   Do not show the records on maps.

   Pin

   Show the records as pins. You can choose the background and foreground colors of the pin.

   Shape

   Show the records as polygons. The polygon must be defined as a Well-Known-Text (WKT) object.

   You can specify the shape as any of the following:

   • A record field containing a WKT object.
   • A static WKT object. You can use Wicket or a similar tool to generate the WKT object.
   • A C# Eval Expression that resolves as a WKT object.

   NOTE: The WKT object is only used for drawing purpose. It does not determine the location of the record on the map. The Location field does. Only the location of the record is used for geofencing.

5. To set a color, do one of the following:
   • Click Constant (), and then click the color picker and select a static color.
   • Click Properties () and select a field containing a color code. We support the most common color codes, from friendly names, such as "Red", "Green", and "Blue", to 6-char and 8-char hexadecimal code codes. For example, "#FF0000FF" for blue.
   • Click Custom expression () and enter a C# Eval Expression that resolves to a color code.