allegroanalyzerguide3.1

IPRO Allegro™Analyzer Desktop/

Web User GuideVersion 3.1April 2012

DisclaimerInformation in this document, including URLs and other references, is subject to change without notice. Unless otherwise noted, any example companies, organizations, products, domain names, e-mail addresses, logos, people, loca-tions, and events depicted herein are fictitious and no association with any real company, organization, product, domain name, e-mail address, logo, person, location or event is intended or should be inferred. Complying with all applica-ble copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any pur-pose, without the express written permission of IPRO Tech, Inc.IPRO Tech, Inc. may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from IPRO Tech, Inc., the furnishing of this document does not give the reader any license to these patents, trademarks, copyrights or other intellectual property. Every pre-caution has been taken in the preparation of this document however; IPRO Tech does not assume responsibility for errors or omissions.

TrademarksIPRO is a trademark of IPRO Tech, Inc. The IPRO logo, and all of our product names are trademarks of IPRO Tech, Inc. Other products and company names mentioned herein may be trademarks of their respective companies and are used for editorial purposes and to the benefit of the trademark owner with no intention of infringing upon that trademark. All services are subject to change or discontinuance without notice.

Copyright© 2009-2012 IPRO Tech All rights reserved.Ver 3.1 04.12Printed in the United States of AmericaIPRO Tech6811 E. Mayo Blvd - Suite 350Phoenix, AZ USA 85054877-324-4776www.iprotech.com

http://www.iprotech.com

IPRO Allegro™ Analyzer 1

Contents

1 Introducing IPRO Allegro™ Analyzer Desktop/Web

Overview ............................................................................1-1In This Chapter.........................................................................1-2Before You Begin using IPRO Allegro Analyzer ...............................1-3IPRO Allegro Components...........................................................1-3IPRO Allegro Workflow ...............................................................1-4

Administrator Component......................................................1-4Analyzer Component.............................................................1-4Administrator Component......................................................1-4

IPRO Allegro Administrator Features ............................................1-4Document Ingestion Simplicity ..........................................1-4

IPRO Allegro Analyzer Features ...................................................1-5About this Guide .......................................................................1-5

Intended Audience ...............................................................1-5In This Guide............................................................................1-5

Related Documents ..............................................................1-6Document Conventions .........................................................1-6

Contact Information ..................................................................1-7IPRO Tech Client Services......................................................1-7Client Services Hours............................................................1-7Before Calling ......................................................................1-7

2 IPRO Allegro AnalyzerIn This Chapter.........................................................................2-1

Starting the IPRO Allegro Analyzer and Logging In....................2-2Signing In as a Different User .....................................................2-6

Interface Components......................................................2-7Opening a Case.........................................................................2-8

IPRO Allegro

2 IPRO Allegro™ Analyzer

Customizing the Workspace ........................................................2-9Hiding/Showing Slideout Panes ..............................................2-9

Hide a slideout pane ........................................................2-9Show a slideout pane.......................................................2-9

Resizing Workspace Components............................................2-9Resize slideout panes.....................................................2-10

Using the Context Menu ......................................................2-10Restoring the default interface .............................................2-10Changing the Background Display.........................................2-10

Navigating through the Documents Set ......................................2-11Viewing the Document Details..............................................2-13Viewing the Document Body ................................................2-14Viewing the Document Relationships .....................................2-15Viewing Document Tags ......................................................2-20Applying Tags to Documents ................................................2-21

Applying Tags from the Tags Panel ..................................2-21Applying User Tags to Documents from the Context Menu...2-23Viewing the Document’s Tag Description ..........................2-24Removing Tags from a Document ....................................2-24

Launching Documents in Native Application ...........................2-25Including or Excluding Duplicates .........................................2-26Filtering Data.....................................................................2-26Showing Parent/Child Relationships in the Filtered Set.............2-27Viewing Filter Types and their Categories for the Data Set .......2-30

Sorting Criteria .............................................................2-31About the Filter Types .........................................................2-31Filtering by Filter Types and their Categories ..........................2-32Filtering by Keywords Searches ............................................2-35Filtering by Tags.................................................................2-39

Using Boolean Operators ................................................2-41Searching Filters ................................................................2-42Adjusting Filter Counts........................................................2-46

Creating Filter Sets..................................................................2-48Basic Filtering ....................................................................2-48Advanced Filtering..............................................................2-49

Contents

IPRO Allegro™ Analyzer 3

Creating Parent Rules ....................................................2-51Creating Child Rules - Search-In-Results Rule ...................2-52Parent Child Filter Example.............................................2-54Using Include Rules vs Exclude Rules ...............................2-55Compound Complete and Rule Types ...............................2-56De-duplication Levels.....................................................2-56Selecting a De-duplication Level ......................................2-58Enabling NIST/Hash Matching .........................................2-58Selecting Non-Indexed Files by Rule (Ingestion Rules) for Filtering ...............................................................2-59

Deleting a Rule ..................................................................2-60Working with the Visualizations Panel.........................................2-60

Filtering Data using the Visualizations Charts .........................2-66Filtering from a Snapshot ...............................................2-68

Applying Tags using the Visualizations Charts.........................2-69Working with Basic or Advanced Filter Sets .................................2-71

Saving Filter Sets as Snapshots............................................2-71Exporting a Saved Filter Set ................................................2-72Duplicating a Saved Snapshot or Filter Set.............................2-73Closing Filter Sets or Snapshots ...........................................2-74Loading a Saved Snapshot...................................................2-74Opening Saved Snapshots ...................................................2-74Deleting Saved Snapshots ...................................................2-75Filtering Grid Columns ........................................................2-77

Running Reports .....................................................................2-79Summary Reports .........................................................2-79Detail Reports...............................................................2-80Choosing a Report .........................................................2-81Working with the Report Tabs .........................................2-84Using the Report Toolbar................................................2-85

Exiting IPRO Allegro™ Analyzer.................................................2-85

Appendix A Metadata Fields

IPRO Allegro

4 IPRO Allegro™ Analyzer

Appendix B Ingestion Manager UtilityReconfiguring the Services ................................................... B-3Stopping and Starting Service Instances................................. B-4Uninstalling the Service Instances ......................................... B-4About the Service Instance Subdirectories .............................. B-5Updating Binaries (.DLLs)..................................................... B-6

Command Line......................................................................... B-7Installation......................................................................... B-7Uninstall ............................................................................ B-7Utility Command Line Options ............................................... B-7

IPRO Allegro™ Analyzer 1-1

1 Introducing IPRO Allegro™ Analyzer Desktop/Web

OverviewIPRO AllegroTM is an early case assessment tool that provides law firms, corpo-rate counsel, and service providers with early insight into the size, scope, and composition of data collections, empowering users to make informed case decisions before moving to the costly stages of e-discovery processing and review.

IPRO Allegro is case based for reporting and exporting of data. It is designed to quickly identify items that need to be moved forward into the review or pro-duction process. The culling process uses search terms and metadata filters in real time and is interactive. Culled items can then be exported out directly to ASCII/XML/PST/NSF or right into IPRO eCapture for extended metadata extraction and TIFFing.

It uses high speed distributed indexing (at ingestion time), supports multiple languages, and quickly identifies items that need to be moved forward through a report driven interface. De-duplication is done at the Case level and is per-formed by the ingestion service prior to culling.

IPRO Allegro will interface with database servers such as SQL Server and other application servers that serve application files for network client access. It allows for the optional use of the NIST national database and custom hash lists for de-duplication.

Starting with version 2.0, user, group, and role based privileges can be setup for case access.

New in version 2.1, an Ingestion Manager Utility is included to allow the ease of stopping, starting, installing, and uninstalling several service instances from the worker machine.

The IPRO Allegro Analyzer Web version is available starting with version 2.2.

Chapter 1, Introducing IPRO Allegro™ Analyzer Desktop/Web

1-2 IPRO Allegro™ Analyzer

New in version 3.0: A Tag Panel was added that displays the tags per tag cate-gory and indicates tags that exist for the selected document. Tags can be applied to a document through the Tag Panel. The new Relationships panel contains three sub-panels: Conversation, Hierarchy, and Duplicates for a quick view of a document’s relationships.

New in version 3.1: A Visualizations Panel was added to allow filtering via Pie Charts or Bar Charts as well as giving a visual depiction of filtering via the Fil-ters Panel. Reporting is now available directly from the Analyzer. When the application is launched the Visualizations Panel appears with the Document Tags, Relationships, Document Body, and Document Details panels hidden from view.

In This Chapter

Section Page

Before You Begin using IPRO Allegro Analyzer 1-3

IPRO Allegro Components 1-3

IPRO Allegro Workflow 1-4

IPRO Allegro Administrator Features 1-4

IPRO Allegro Analyzer Features 1-5

About this Guide 1-5

Related Documents 1-6

Document Conventions 1-6

In This Guide 1-5

Related Documents 1-6

Document Conventions 1-6

Contact Information 1-7

Before You Begin using IPRO Allegro Analyzer


Before You Begin using IPRO Allegro AnalyzerRefer to the IPRO Allegro Installation and Setup Guide to install and setup IPRO Allegro. See the IPRO Allegro Web Version Installation and Setup Guide for the web based version of the Analyzer.

Once data is ingested for a Case in the IPRO Allegro Administrator, the data is ready for filtering in the IPRO Allegro Analyzer.

Login credentials are required to access IPRO Allegro Administrator and IPRO Allegro Analyzer. See Chapter 2, IPRO Allegro Analyzer and the section Start-ing the IPRO Allegro Analyzer and Logging In on page 2-2 for information.

Security privileges for users, groups, and roles, are configured through the IPRO Allegro Administrator.

IPRO Allegro ComponentsThe Administrator component is used for:

• Security: Set up Users, Groups, and Roles for Case access.• Organizing Data: Set up Clients, Cases, Collections, Custodians, and

Containers.• Ingesting: Indexes, de-duplicates, and extracts pertinent metadata for

culling.• Reporting: Run File, Custodian, Duplicate, and Error Summary reports. • Exporting: Export saved filter sets, filtered Case data from IPRO Allegro

Analyzer, using the Wizard interface. Output targets include Delimited text, direct to IPRO eCapture, and to disk with load file.

The Analyzer component is used for:

• filtering ingested data for later export in IPRO Allegro Administrator• filtering (basic and advanced)• applying rules



IPRO Allegro WorkflowAdministrator Component• Set up Users, Groups, and Roles for Case access• Create Clients, Cases, Collections, Custodians, and Containers.• Set Case options - indexing, hash, etc.• Start jobs for ingestion• Review Reports for completed jobs

Analyzer Component• Load Case• Filter Data• De-dupe across Case, Collection, Custodian, or None.• Save Filter Sets for Exporting

Administrator Component• Create Export Jobs from ingested jobs or saved filter sets.• Start Export Job.

IPRO Allegro Administrator FeaturesDocument Ingestion Simplicity

Case data is ingested through the IPRO Allegro Administrator. Administrators can easily:

• Set up Clients, Cases, Collections, Custodians/Containers• Navigate through Clients• Auto generate Custodians/Containers for a Collection• Set up Custodians and Containers individually• Start or Pause a Collection• Filter via Status, Client Name, Case Name, and Collection Name• View Details for each Container and filter by Container or Worker Name• Set up User, Group, and Role privileges for Case access

IPRO Allegro Analyzer Features


IPRO Allegro Analyzer FeaturesEasily cull a data set by selecting specific metadata filters that include file types, domains, e-mails, custodians, collections, dates, languages, and key words.

De-duplicate at the Case, Collection, Custodian levels, or None.

The filtered sets can be viewed two ways: indexed or detailed.

Save the filtered set for exporting and review.

About this GuideThis guide assumes that IPRO Allegro is properly installed and configured. In addition, all the Case information is organized on hard drives, laptops, or other media for ingestion by the IPRO Allegro Administrator.

Intended AudienceThis document is intended for law firms, corporate counsel, and service provid-ers who will use IPRO Allegro to ingest, filter, and export case data prior to e-discovery processing and review.

Users are expected to have basic knowledge and understanding of:

• The legal industry and discovery process.• Your organization and how IPRO Allegro will be used within it. • Windows administrative functions; areas such as networks, client-server

issues, and Windows Active Directory, as they pertain to your organiza-tion.

• SQL Databases. The requisite SQL knowledge and skills are required.

In This GuideIn addition to this introduction, the following chapters contain the information needed to administer all aspects of IPRO Allegro:

Chapter 2, IPRO Allegro Analyzer describes how to open a case, use the meta-data filters, filter the case data, use filter states, save filter sets, perform advanced filtering, view records, etc.



Appendix A, Metadata Fields lists the currently (for this version of IPRO Alle-gro) supported metadata fields for the data load files.

Appendix B, Ingestion Manager Utility describes the Ingestion Manager Utility and the command line interface for the System Administrator.

Related Documents• IPRO Allegro Administrator User Guide• IPRO Allegro Installation and Setup Guide• IPRO Allegro Software Requirements Document• IPRO Allegro Database Update Utility Guide (updating previous data-

bases for compatibility with the current version of IPRO Allegro)• IPRO Allegro Upgrade Guide• IPRO Allegro Supported File Types• IPRO Allegro DBDiagram (Schema) for Case• IPRO Allegro DBDiagram (Schema) for Config• Release Notes

Additional information may be obtained by visiting www.iprotech.com.

Additional copies of the documentation are available for customers at http://www.iprotech.com/Support/UserManuals/. An e-mail validation is required.

Document ConventionsThe following conventions are used throughout the IPRO Allegro documenta-tion:

Bold text indicates keyboard input, a mouse selection, or a menu selection.

Indicates useful information that supplements or emphasizes impor-tant points in the surrounding text. This information might apply only to certain circumstances.

Indicates critical information that should be read before continuing.


http://www.iprotech.com/Support/UserManuals

http://www.iprotech.com/Support/UserManuals

Contact Information


Alternate mouse button refers to the secondary button on the mouse. Where right-click is referenced, substitute with left-click for left-hand mouse configu-ration.

Contact InformationIPRO Tech Client Services• Telephone:

Within Arizona: 602-324-4781

Outside Arizona: 877-477-6437• Fax: 602-324-4784• E-mail: [email protected]• Web site: www.iprotech.com

If you call and are asked to leave a message, please include your name, com-pany name, phone number with area code, and activity number if applicable.

Note: For questions about Microsoft SQL Server, contact Microsoft at www.microsoft.com.

Client Services HoursIPRO Tech Client Services hours are from 5:00 a.m. to 1:00 a.m Arizona Time (GMT -7:00) Monday through Friday

Before CallingPlease have the information in the following table available for Client Services so they can process your call accurately and efficiently.

Item Details

Activity number The activity number you were given during your initial contact with IPRO Client Services. If this is your initial contact, you will receive an activity number. The activity number helps to expedite your call.

mailto:[email protected]




Company infor-mation

Your company name, contact name, and phone number with area code.

IPRO Allegro product informa-tion

IPRO Allegro product component (Analyzer) Access the main menu and choose Help > About IPRO Allegro Analyzer.

System details Operating system and service pack number if applicable.

Problem descrip-tion

Exactly what you were doing at the time the error occurred.A summary of the steps you followed.

Error messages/logs

• Error messages and/or error log files. See the IPRO Allegro Installation and Setup Guide for details on accessing the .LOG files.

Item Details


2 IPRO Allegro Analyzer

The IPRO Allegro Analyzer allows for interactive, real time culling of the case data using search terms, metadata filters, and advanced searching tied to indi-vidual rules. Run IPRO Allegro Analyzer from the desktop or from a Web Browser such as Internet Explorer.

In This Chapter

Section Page

Starting the IPRO Allegro Analyzer and Logging In 2-2

Opening a Case 2-8

Customizing the Workspace 2-9

Navigating through the Documents Set 2-11

Viewing the Document Details 2-13

Viewing the Document Body 2-14

Viewing the Document Relationships 2-15

Viewing Document Tags 2-20

Applying Tags to Documents 2-21

Launching Documents in Native Application 2-25

Filtering Data 2-26

Showing Parent/Child Relationships in the Filtered Set 2-27

Viewing Filter Types and their Categories for the Data Set 2-30

About the Filter Types 2-31

Filtering by Filter Types and their Categories 2-32

Filtering by Keywords Searches 2-35

Filtering by Tags 2-39

Searching Filters 2-42

Chapter 2, IPRO Allegro Analyzer


Starting the IPRO Allegro Analyzer and Log-ging In

1. Do one of the following:

• Double-click the on the desktop. The Sign In dialog appears. Proceed to step 2.

• From a web browser, enter the address in the browser URL field. The Sign In dialog appears. Proceed to step 2.

Adjusting Filter Counts 2-46

Creating Filter Sets 2-48

Working with the Visualizations Panel 2-60

Filtering Data using the Visualizations Charts 2-66

Working with Basic or Advanced Filter Sets 2-71

Running Reports 2-79

Exiting IPRO Allegro™ Analyzer 2-85

Only jobs that have completed ingestion in the IPRO Allegro Adminis-trator will be available for filtering in the IPRO Allegro Analyzer.

Section Page

In This Chapter


2. Enter a User Name and Password (case sensitive) in the Sign In dialog.

3. Click . One of the following happens:



• The IPRO Allegro Analyzer opens.

Proceed to step 4.

In This Chapter


• The Change Password dialog appears for Users who login for the first time and are set up for force password change by the Admin-istrator.

Enter the password assigned by the Administrator. The password is case sensitive. Enter a new password. Repeat the password in the confirm password field. This new password will be used to login for

subsequent sessions. Click . The IPRO Allegro Analyzer opens and displays the Open Case dialog. Proceed to step 4.

4. From the Open Case dialog, expand the Client containing the Case you wish to open.



Note: Only Cases with one or more completed jobs are available for selection and appear in the list.

5. Select the Case and click . The Case does not load when ini-

tially opened. To load the documents for the Case click .

6. Proceed to the section Interface Components on page 2-7.

Signing In as a Different UserIt is not necessary to exit the application in order to sign in as a different user. The user must have the appropriate security to access the application.

Signing In as a Different User


1. Click and click . The Sign In dialog appears.

2. Enter the login credentials. The password is case sensitive.

Interface Components

Analyzer Button : From the menu, open cases, open snapshots, save snapshots, delete snapshots, change password, reset the window layout, and toggle background display.

Filter Set tabs: Alternately clicking a filter set tab displays a menu where new filter sets can be created (basic or advanced), duplicated, saved, or closed.

Advanced Filter Sets invoke the Rules pane. From the Rules pane:

• Context menu with Docking options and Export Filter Rules options• Expanded or collapse rules• Create new rule and name• Create new Search-in-Results rule and name• Exclude rule option

Filters pane:

• Context menu with Export Filter Rules, Sort options (name or count), and Search Filters

• Filter types (File Types, Domains, E-mails, Custodians, Collections, Dates, Languages, Key Words, and Tags)

• Apply button - used to apply the filtering criteria• Reset button - used to reset the filtering criteria to the default setting

(everything is selected)• Total Documents and Total MB

All screen components can be customized and are dual monitor capa-ble. The scroll wheel on the mouse can be used to scroll vertically.



• View Panel - Compound Complete, De-duplication, NIST/Hash Matches, and Ingestion Rules

Center panels:

• Visualizations - View Domains, Emails, File Types, Custodians, Collec-tions, Languages, and User Tags as Pie Charts or Bar Charts. Filter results are reflected in the charts.

• Reports - run reports for Case, Collection(s), Custodian(s), or Snap-shot(s). Report types include File, Custodian, Duplicate, Error, or Key-word Hits. Either Summary or Detail reports can be run for the selected type.

• Documents - lists the documents for the selected case.

The following Slideout Panes are located on the right side of the interface.

• Document Tags - contains separate panels; System, User Tags, and Ses-sion-Wide Tag Options

• Relationships: Presents the relationships for the selected document in the Documents panel. Relationships include Conversations, Hierarchy, and Duplicates.

• Document Body - contains the details for the selected document.• Document Details - contains the metadata field name and its corre-

sponding value.

Status Bar: shows messages such as Ready, Updating filters, Loading docu-ments, etc. and the Case Details: Total Documents.

Opening a CaseOnce IPRO Allegro Analyzer is opened, a different Case can be selected by

clicking and choosing Open Case. From the Open Case dialog, expand the Client containing the Case you wish to open for filtering. Select the Case

and click . The previously opened Case closes. Click to load the documents for the Case.

Customizing the Workspace


Customizing the WorkspaceSeveral aspects of the IPRO Allegro interface can be customized to meet your preferences. IPRO Allegro supports dual monitors.

Hiding/Showing Slideout PanesHide a slideout pane

To hide a slideout pane, click the Auto-Hide pin icon as shown in the following figure:

The hidden pane appears as shown in the following figure:

Show a slideout pane

Click the tab of interest (for example, Filters as shown in the previous figure)

to open it and click to “pin” the pane in place.

Resizing Workspace ComponentsThe different panes in the workspace can be resized to allow more or less space for other panes.



Resize slideout panes

To resize a left or right slideout pane:

1. Position the mouse pointer over the edge of the slideout pane to be

resized until the pointer changes to .

2. Drag the pane boundary to the desired size.

Using the Context MenuWhen you alternate click on a component bar in the interface, the following context menu appears:

Through this menu, components can be floated, docked, tabbed, or hidden.

Tabbed items (Documents) can be floated. Point, click, and drag the tab to the desired location and release the mouse button. (This does not apply to the Fil-ter Set tab that is part of the Filters pane.)

Restoring the default interface

Click located to the right of the Analyzer button. The default interface is restored.

Changing the Background DisplayThe default display shows background images.

Navigating through the Documents Set


1. To change the background display, click and choose

.

2. Choose Background. If the images were present, they disappear. If the images were not present, they reappear.

Navigating through the Documents SetThe Documents panel contains a Navigation toolbar and the documents as shown in the following figure:

By default, 20 documents display per page. To navigate through the docu-ments in a Case, use the Navigation toolbar, located in the Documents panel, as shown here:



Enter a page number in and click to go directly to that page.

Click To

move to the first page in the documents set

move to the last page in the documents set

move to the previous page in the documents set

move to the next page in the documents set



Viewing the Document DetailsClick the Document Details slideout pane located on the right side of the inter-face. The Document Details pane shows metadata, extracted, OCR Confidence Level, and system field names for the currently selected document in the Doc-uments panel.



Note: For PDF files, the OCR Confidence Level only reflects those pages that were actually OCRed. This field is available for export.

The Languages metadata field displays the percentage for each language in the document.

Viewing the Document BodyClick the Document Body slideout pane located on the right side of the inter-face. The Document Body displays the content of the selected document in the Documents panel.



Viewing the Document RelationshipsTypically, documents and/or emails exist within a chain of other related docu-ments. For example, a PDF file may be related to an email because it was sent as an attachment in that email. Another example would be a newly created email that was sent from the original author to a single recipient with an attachment. The recipient replied to the sender cc’d several other individuals, and added a different attachment. From this point one or more of the recipi-ents may decided to reply and include more attachments, and so on. The Rela-tionships in IPRO Allegro™ Analyzer clearly show the parent/child relationship hierarchy for a selected document in the Documents panel. After filtering, the Relationships panel is used to ascertain if the document was an attachment to an email, a loose file, etc.



To view the relationships of a selected document (target item) in the Docu-ments panel, click the Relationships slideout pane located on the right side of the interface.

Each sub-panel in the Relationships panel can be collapsed or expanded. The three sub-panels are:



• Conversations - Displays the conversation thread of the selected email (target item) in the Documents panel. It will show all the e-mails that belong to the same thread, regardless of whether or not they meet search criteria. This is true for both an e-mail or an e-mail’s attachment.

In most cases, the top level in the thread displays an envelope icon followed by a label name. This envelope icon is representative of the subject line. For e-mail items, the label is the subject line in the e-mail. Replies/forwards are generally depicted as children in the thread and are

indicated by these icons respectively / . In some cases, the forward

icon or the reply icon will be in the top level of the thread.

When the sender is not known, it displays: Missing Source Email (n items). For loose files (not part of an e-mail), the Conversations sub-panel will display No items.

By moving the mouse pointer on a thread item, the name becomes a hyperlink and a tooltip appears indicating whom the sender sent the e-mail to as well as CC names, if applicable.

When the hyperlink is clicked, a Detail window opens. The Detail window



title bar displays the name of the clicked hyperlink.

This detail window is divided into two sections: document contents and document location.

The document contents will differ based on the document type. The pre-vious figure shows detail for Outlook e-mail with field labels that are



related to an e-mail. For other document types (Word, Excel, Power-Point, PDFs, etc.) the detail window would show:

The filename is a hyperlink. When the hyperlink is clicked, the native application launches provided it is installed on the machine running IPRO Allegro Analyzer. The lower left corner of the IPRO Allegro Analyzer inter-face (Status Bar) display Downloading document... when the filename hyperlink is clicked.

When the Detail window is initially opened, the location portion of the detail window is collapsed. Click the down arrow to display the location hierarchy. The following figure shows an example of an e-mail’s location in a hierarchical format.



In the previous figure, the target item is a Word document which is an attachment to an e-mail located in the Inbox for Bill Rapp. The subject of the e-mail (Four Seasons Resort Letter) is in boldface and italics. Sibling items, if they exist for the target item, will be shown.

• Hierarchy - Displays the family items of the selected item in the Docu-ments panel. All family items are shown; at all levels, including NIST/Hash matches and duplicates even if they do not meet the search crite-ria. The following figure shows the hierarchy of the e-mail (Subject: Four Seasons Resort Letter) and its attachment (FourSeasonsResortA.doc).

By moving the mouse pointer on an item, the name becomes a hyper-link. Click the hyperlink to open the Detail window.

Duplicates - Displays the duplicates of the target item in the Documents panel grouped by Custodian. The total number of documents per Custodian is dis-played in parenthesis next to the Custodian. All duplicates are shown even if they do not match the search criteria.

The original is boldface while duplicates are not boldface.

To view the duplicate location tooltip, place the mouse pointer over the dupli-cate or click the hyperlink to open the Detail window. Expand the Location panel to view the path for the duplicate.

Viewing Document TagsTo view the tags, click the Document Tags slideout pane located on the right side of the interface.



Applying Tags to DocumentsSystem tags are pre-defined by the system and exist for each Case. User cate-gory and user tags are created in the IPRO Allegro Administrator on a Case by Case basis. See the IPRO Allegro Administrator Guide, Chapter 2, IPRO Allegro Administrator, and the section Tags on page 2-65 for information about creat-ing tags.

When tags are applied to a document, they can then be used as a filter item. More than one tag may be applied per document. Tags may already exist for documents when the Case collection is loaded because tags were included in one or more ingestion rules prior to ingesting the data. See the IPRO Allegro Administrator Guide, Chapter 2, IPRO Allegro Administrator, section Ingestion Rules on page 2-55 for additional information.

Tags may be applied from the Document Tags pane or from the context menu; accessed by alternate clicking the document in the Documents panel.

Applying Tags from the Tags Panel

One or more User Tags and/or System Tags may be applied to a document.

1. Click the Document Tags slideout pane located on the right side of the interface.

2. Expand the System Tags sub-panel to view the System Tags.



In the previous figure, the System Tags categories shown include:

• Exceptions - Index Failure applies for documents that fail to be indexed. OCR Required applies to a document that has no extractable text or is a known image file type. Password Protected applies to documents that are password protected. Unextractable File applies to documents that could not be extracted.

• Miscellaneous - File Type/Extension Mismatch applies if a document’s file type and its extension do not match. This may occur because file types that have known extensions in the database may have an unknown extension on disk or may have another known extension on disk. Long File Path applies for documents that use LongFilePath han-dling. Zero Byte File applies to a document with a zero byte size.

• NIST/Hash Match - populates based on settings configured for the Case in Case Options:Hash Settings. Hash list matching documents are tagged automatically. The new tag that is added to this category will have the name of the hash list.

Expand the User Tags sub-panel to view the User Tags. By default, the User Tag Categories are expanded.



In the previous figure, there are three user created Tag Categories: Character-istics, Privilege, and Review Status; each with its related Tags.

1. Navigate to the document in the Documents panel and select it.


• Select one or more individual tags. The tag icons(s) appear next to the hyperlink.

• Alternate click a tag to display the context menu and choose from one of the following:• Apply to current document (the same as selecting an indi-

vidual tag by checking its box)• Apply to all documents in family (parents and children are

tagged whether the parent document or the child document is selected in the family)

• Apply to all documents in filter set (every single document in the entire filter set is tagged)

The screen refreshes and the document tag icon(s) appears to the right of the Document’s link.

When Tag Categories are added in the IPRO Allegro Administrator, a color may be chosen to indicate the Tag Category. This color tag is useful to quickly identify the tag assigned to the document in the Documents panel.

3. Repeat steps 1 and 2 to add additional tags.

Applying User Tags to Documents from the Context Menu

The context menu allows for one or more User Tags to be applied to a selected document or a selected document’s family (parents and children). To apply System Tags, use the System Tags panel. See the section Applying Tags from the Tags Panel on page 2-21.


2. Alternate click the document to display the context menu.



3. Do the following:

• To tag an individual document, choose Tag As to display the sub-menu. Expand the Tag Category and select one or more Tags. The Tag(s) is/are applied to the selected document. A checkmark appears in the box for the selected tag(s).

• To tag all documents (parents and children) that are in a family, choose Tag Family As to display the submenu. Expand the Tag Category and select one or more Tags. The Tag(s) is/are applied to all documents that are part of that document’s family. A check-mark appears in the box for the selected tag(s).

4. Click outside of the context menu to close it.

Viewing the Document’s Tag Description

Place the mouse pointer on the tag icon to display the tooltip that contains the category and its tag.

Removing Tags from a Document

User Tags may be removed individually from a document, from documents in a family, or from documents in a filter set. Tags are removed using the Tags panel whether they were applied using the Tags Panel or the individual docu-ment’s Context Menu.


2. Expand the User Tags sub-panel to view the categories and their tags.

3. If necessary, expand collapsed categories.


5. From the Tags panel, do one of the following:

• Deselect one or more individual tag(s). The tag icon(s) are removed.



• Alternate click the tag to display the context menu and choose Remove. Choose from one of the following:• From current document (the same as deselecting an individ-

ual tag by checking its box)• From all documents in family (the tags are removed from the

parents and children regardless of the document selected in the family)

• From all documents in filter set (every single tag is removed from every document in the entire filter set)

Launching Documents in Native ApplicationDocuments can be launched in the native application provided the native appli-cation is installed on the same machine running IPRO Allegro™ Analyzer.

1. From the Documents panel, click the filename hyperlink of the document to launch in the native application. The native application opens.



2. Close the native application after viewing file.

Including or Excluding DuplicatesWhen the Include Duplicates option is ON (the default setting), tags will be applied to all duplicate documents with the same Parent/Child relationship structure. When the option is OFF, tags will only be applied to the current doc-ument.


2. At the bottom of the Document Tags panel, expand the Session-Wide Tag Options sub-panel.

3. From the Include Duplicates drop-down list, select either ON (default) or Off.

Filtering DataWhen a Case is initially opened, all categories are selected for every Filter type, and the Date range includes the minimum and maximum date found in the collection. The default tab, Filter Set 1, appears.

Data can be filtered by selecting/deselecting categories for each Filter type, indicating date ranges, and entering keywords.

Filtering can also be done through the Visualizations panel which contains the Filter types depicted as Pie Charts or Bar Charts. See the sections Working with the Visualizations Panel on page 2-60 and Filtering Data using the Visual-izations Charts on page 2-66.

Once filtering is complete, the filtered sets may be saved.

See the section Creating Filter Sets on page 2-48 for information about creat-ing basic filter sets and advanced filter sets.



Showing Parent/Child Relationships in the Fil-tered SetThe Compound Complete option is turned ON by default. It will display the Parent/Child relationship structure for a Case when initially opened for basic filter sets and advanced filter sets.



When Compound Complete is On and filtering and/or keyword searching is done on the data set, the relationships do not appear transparent. The items that do not match on Filter criteria are transparent as shown here:

Position the mouse pointer on the transparent document (vacant area to the right of its details) to view its filter criteria in the form of a tooltip as shown in the previous figure.

When Compound Complete is turned off, and a document is returned as part of a result set, it will not necessarily include parent, sibling or child documents.

Applying or resetting the filters does not change the Compound Com-plete, De-duplication, or Sort settings.



Basic Filter Set and Advanced Filter Set

To disable Compound Complete for a basic filter set and advanced filter set, expand the Filters’ View panel to display the Compound Complete drop-down list (as shown here) and choose Off.



Viewing Filter Types and their Categories for the Data Set

Click to display the distinct criteria under each applicable Filter type that exists for the data set.



To individually expand/collapse a Filter type, click the up or down arrow.

The criteria count (shown in parenthesis) appears for a Filter type, where applicable, and will be sorted in descending order as shown in the following figure:

In the above figure, there are more Microsoft Outlook E-mails than any other File Type for the data set.

Sorting Criteria

The default sort setting for the criteria is By Count.

The Criteria can also be sorted by name. Alternate click the Filters Pane title name to display the context menu. Note: If the Rules pane is open, only the Sort option appears.

Choose Sort > By Name.

About the Filter TypesFile Types: The File Types filter shows the file types that are present in the data set.



Domains: The Domains filter shows domains that exist in the case associated with e-mail addresses. Expand “All” to view the Domains.

E-mails: The E-mails filter shows the e-mail address encountered in the data set. Expand “All” to view all the Emails. Null values may appear for users who only sent e-mail within their own e-mail environment. SMTP addresses are not utilized until a user sends e-mails outside of their own e-mail environment. As a result, Allegro Analyzer may display a value of NULL for the e-mail address of a document but may be updated to display the SMTP as more data gets added to the case. The number of documents for a given e-mail address shown might increase as more data is added and NULL values may be reduced.

Custodians: The Custodians filter shows the Custodians that were added for the Case.

Collections: The Collections filter shows the Collections that were added for the Case.

Dates: The Dates filter will show the minimum and maximum modified date across all items in the Case prior to filtering. When filtering by dates, use dates that fall in the date range for the case. Dates outside the range cannot be used. A combination of fields are used for the date field (minimum and maxi-mum) as follows: AppointmentStartTime, EmailSentTime, and Modification Date.

Languages: The Languages filter shows the languages that are present in the data set.

Key Words: The Key Words filter is used to filter by keywords that are entered individually or by loading a .TXT file populated with keywords.

Tags: The Tags filter is used to filter by User Tags, System Tags, Productions, and Snapshots. Can also filter by all documents that are untagged.

View Panel: Contains the following options - Compound Complete (On/Off), De-duplication Level (Case, Collection, Custodian, or None), NIST/Hash Matches (On/Off), and Non-indexed Files by Rule (shows Ingestion Rule or Rules added for the Case).

Filtering by Filter Types and their CategoriesBy default every single Filter type and its categories are selected upon opening a Case.



Each Filter type has a checkbox. The Filter type checkbox has three different states:

• Unchecked (the box is empty) - there are no selected categories or there are no categories that exist for the Filter type.

• Checked (contains a checkmark) - all categories are selected for the Fil-ter type.

• Indeterminate (contains a dash) - some categories for the Filter type are selected and some are not selected.

These Filter type checkbox states assist in quickly determining the Filter type selections/de-selections when the Filter types are in collapsed mode as shown in the following figure.

The checkboxes for E-mails and Languages indicate, respectively, that no cate-gories were selected for E-mails and that one or more categories were selected under Languages. The absence of a Filter type checkbox indicates that all categories within that Filter type were selected.



To exclude a Filter type category (ies) from being included in a Filter Set, deselect its checkbox as shown in the following figure.

By deselecting a Filter type, all of its categories are deselected at the same time. For example, if you wanted to filter a data set to exclude its e-mails, you would deselect the E-mails Filter type. Notice the Filter type’s checkbox is clear as shown in the above figure.

However, if you wish to select specific categories within the Filter type, then first clear the checkbox for the Filter type, and select the specific categories as shown in the following figure.

Notice the Filter type’s checkbox contains a dash. This indicates that one or more categories for the Filter type are selected.

By selecting the checkbox for the Filter type, all of its categories are automati-cally selected as shown in the following figure.



Notice the Filter type’s checkbox contains a checkmark indicating that all cate-gories for this Filter type are selected for filtering.

Filtering does not count the number of instances found per document. For example, if the e-mail [email protected] is selected in the E-mails Filter type, it will count one instance of this e-mail address in an e-mail even if the address appears more than once in that same e-mail.

Filtering by Keywords SearchesSearch keyword terms can be loaded from a .TXT file or entered manually in the Search For field.

1. Click to collapse the Filters for the data set.

2. Expand Key Words to display the search options as shown here:

3. Select one of the following:

• Any Words: This search request is for unstructured natural lan-guage or “plain English” queries. The Boolean operators AND & OR are disregarded. Examples follow:



You may use "quotation marks" around phrases. For example, “personal computer”. Quotes are used when the search requires that the words are contiguous and in the order they are indicated.

add + in front of any word or phrase to require it

add - in front of any word or phrase or to exclude it

Example: "personal computer" -monitor +"flash drive"• All Words: This search request is similar to Any Words (previous

bullet item), with the exception that all of the words in the search request must be present for a document.

• Natural Language: Automatically weights the words in an “Any Words” search to disregard words such as AND and OR and focus on the more relevant, less frequently found words. For example: Entering the terms Find the memo on ski-induced paralysis will weigh “ski-induced” and “paralysis” very high in the search results, helping to weed out hits for “memo”.

• Boolean Search: Activates and, or, not, w/n, (where n is a value; e.g. 5), and fields. Use these as you compose your search request. The following table describes Boolean examples/interpretations and additional search options.

Boolean Usage Examples Interpretation

computer and monitor both words must be present

computer or monitor either word can be present

computer w/5 monitor computer must occur within 5 words of monitor

computer not w/5 monitor computer must occur, but not within 5 words of monitor

computer not monitor only computer must be present

[fieldname] contains smith the field name must contain smith

computer w/5 xfirstword computer must occur in the first five words



Using Special Characters

Use ? to match any single character. For example, appl? matches apple or apply

Use * to match any characters. For example, m*g matches mustang, morning, mug, etc.

~~ matches a numeric range. For example, 14~~18 looks for 14, 15, 16, 17, or 18

4. Enter the term or terms in the Search For field directly or click to open the Search For dialog.

computer w/5 xlastword computer must occur in the last five words

Boolean Usage Examples Interpretation



• Enter the keyword(s) directly in the dialog, one term per line. To search for phrases, use quotes, e.g. “wholesale energy market”. The Boolean operator AND is assumed. The result will display all items that contain both the keywords and phrases.

To load an existing .TXT file containing keywords, click . Select the .TXT file with the keywords and click Open. The words in the .TXT file appear in the Search For dialog; one word per line. The imported keyword list can be modified if necessary.

Note: The option, Insert OR Connectors, appears in the Search For dia-log when Boolean Search is selected. When this option is selected, OR connectors are added after each term in the list, a checkbox appears next to the option, and the option’s text changes to Remove OR Connec-tors. By deselecting the checkbox, the OR connectors are removed from the list. See the section Using Boolean Operators on page 2-41 for more information.

5. Click to close the Search For dialog. The keywords appear in the Search For field in the Filters pane. The Key Words Filter type check-box contains a dash.

6. Select from the following additional options:

• Stemming: Extends a search to cover grammatical variations. Use ~ at the end of the word to search for stemming variations. An example follows:

Enter the terms fish~ swamp applied~ to find fish, fishing, swamp, as well as applying, applies, and apply.

Stemming rules are designed to work with the English language. They are stored in the STEMMING.DAT file in the dtSearch folder.

• Phonic: Looks for words that sound like the word you entered in the search request. An example follows:

Enter #Smith to find Smith, Smithe, and Smythe.

For best results, use a # in front of individual words to be searched phonically. If you simply select Phonic searching under



Search Features, the search will apply phonic rules to all words and can return too many inappropriate results.

• Synonyms: Finds synonyms established by IPRO Allegro’s dtSearch function or user-defined. Use & at the end of the word to search for its synonyms. An example follows:

Enter watchful& monitor to search for the word watchful or its synonyms and/or the word monitor (without synonyms).

Related Words: Select this option to support synonym searches. Standard synonyms and related words are supplied by WordNet (supplied with dtSearch and built into IPRO Allegro). For example, the related words for Face would be eyes, nose, mouth, etc.

• Fuzzy Searching: Scale range is 0 through 9. Finds words even if they are misspelled. A search for alphabet with a fuzziness of 1 would also find alphaqet. With a fuzziness of 3, the same search would find both alphaqet and alpkaqet. It is useful for text that may contain typographical errors or that has been imaged and OCRed. Use the slide meter to adjust the fuzzy search level.

• Include non-indexed files as matches: When selected, ensures that items without text are counted as hits. File examples include: PDF, Graphics, JPEGs, TIFFs, etc.

Filtering by TagsThere are four sets of Tags: System Tags, User Tags, Productions, and Snap-shots. System Tags are pre-defined by the System. User Tags are added under Case Options in the IPRO Allegro Administrator. To view these Tags, click the Document Tags slideout pane located on the right side of the interface. Two separate sub-panels appear: System Tags and User Tags. An additional panel, Session-Wide Tag Options, is used to include or exclude duplicates. See the section Launching Documents in Native Application on page 2-25 for additional information.

As documents are tagged from the Document Tags panel, the Tags filter popu-lates. The default tag is Untagged and is selected by default. User Tags, when expanded, shows the defined user tags and indicates the total number of each tag that was applied in the collection. All tags display regardless of whether they were applied in the collection.



If ingestion rules were applied for the collection prior to ingestion with the action, Tag As, the documents will display those tags when the Case docu-ments are loaded. For example, to return all Microsoft Outlook e-mails that were marked Reviewed, select only Microsoft Outlook E-mails under File Types and select the tag Reviewed.

1. Click to collapse the Filters for the data set.

2. Expand Tags to display the Tags as shown here:

3. Expand the Category to view its tags by clicking the black triangle. The previous figure shows expanded views for each Category under User Tags.

By default, Untagged is selected. When filtering is done using other cri-teria, the documents that are tagged are not relevant.

4. Select/deselect the Tags.

5. Click to view the filtered results. When a document is selected in the Documents panel, the corresponding tags for that document are



shown checked in the Document Tags panel under System Tags and/or User Tags.

6. To save as a Snapshot, alternate click the Filter Set tab and choose Save as Snapshot. In the Save As Snapshot dialog, enter a name. This name will appear in the Export Wizard (IPRO Allegro Administrator). The date and time automatically appear by default for each saved Snapshot.

Resetting Filters

The filtering can be cleared by clicking . This resets all the filters back to the default setting: everything is selected. However, the Compound Complete, De-duplication, and Sort settings will not be affected.

Click to reset the Total Documents value in the Filters pane. This value will match the Total Documents in the Status Bar as shown here,

Using Boolean Operators

For Multiple search keywords/phrase combinations, the following Boolean operators may be used:

• AND: Placing the Boolean operator AND between keywords and phrases will display all items that contain both the keywords and phrases.

• OR: Placing the Boolean operator OR between keywords and phrases will display all items that contain either the keywords OR the phrases. When using the Search For dialog, the OR connector can be inserted via an option (or removed via an option).

• NOT: Placing the Boolean operator NOT before keywords or phrases will display items that do NOT contain the keywords or phrases.

Nested: Use Parenthesis in conjunction with the above Boolean operators to group search concepts in order to limit and order relations between the con-cepts.



Searching FiltersThe following Filter types can be searched:

• Collections• Custodians• Domains• Emails

Scenario: When a considerable number of email addresses are present, use the search filters function to cull the list by filtering for a specific name.

1. Alternate click the Filters Pane title name to display the context menu.



2. Choose Search Filters to display the Search Filters dialog.

3. Do the following:

• From the Filter Type to Search drop-down menu, select a filter type.

• In the Search Text field, enter the text.• From the Counts drop-down list, select a count value. The default

is None. The other options are: Between, Equals, Greater Than, and Less Than.



• Click to display the results in the Search Results box. The searched text appears in the Search Results field.

The above screen shot shows all emails containing the name Kimberly and their associated counts in parenthesis. Because the Count was set to between 1 and 4, it excluded the Kimberly emails with a count of 5 or greater.



The following screen shot shows results for no count (None). There is one additional Kimberly email that displays a count of (13).

4. Click to expand the Categories for each Filter. For example, the fol-lowing screen shot shows the Categories of the email address [email protected] (13) as: From (4), To (7), and CC/BCC (2).



When a Filter checkbox is deselected, all of its Categories are automatically deselected. A specific Category may be selected for a Filter.

Adjusting Filter CountsThe filter category document counts that are affected include: File Types, Domains, Emails, Custodians, Collections, Languages, and Tags.

Document counts are updated (increase/decrease) and sorted accordingly predicated on the settings for the options shown here:

• De-duplication Level - By default, the level is set to Case.

Case wide: De-duplication is done at the Case level. All documents in the Case are de-duplicated against one another (regardless of the Collection or the Custodian they belong to). Therefore, there should be one instance of the document per Case. One copy of the document should be displayed in the Documents panel and the document should be counted once in the Filter counts.

Collection wide: De-duplication is done at the Collection level. All docu-ments within the Collection are de-duplicated against one another. Example: Document A in Collection 1 will not be de-duped against Docu-ment B in Collection 2. Document A in Collection 1 will only be de-duped against Document B (or any other) in Collection 1. Therefore, there should be one instance per collection. The Document may display multi-ple times in the Documents panel and may be counted multiple times in the filter items depending on how many Collections have a copy of it.

Custodian wide: De-duplication is done at the Custodian level. All the documents within a Custodian are de-duplicated against one another. Document A of Custodian 1 will not be de-duped against Document B of Custodian 2. Document A of Custodian 1 will only be de-duped against Document B (or any other) of Custodian 2. Therefore, there should be one instance per Custodian. The document may display multiple times in the Documents panel and may be counted multiple times in the filtered items depending on how many Custodians have a copy of it.

See the section De-duplication Levels on page 2-56 for additional infor-mation.



• NIST/Hash Matches - By default, this is set to Off. If set to On, the filter counts should increase because NIST/Hash Matches are included in the set. When Off, filter counts should decrease. See the section Enabling NIST/Hash Matching on page 2-58 for additional information.

• Non-Indexed Files by Rule - By default, all rules are selected. See the section Selecting Non-Indexed Files by Rule (Ingestion Rules) for Filter-ing on page 2-59 for additional information.

Non-Indexed Files by Rule Scenario: An ingestion rule entitled PPT was added for the Case. The Case has a total of 9 Microsoft documents (3 PowerPoint, 3 Word, and 3 Excel). During ingestion, all Microsoft PowerPoint documents were not indexed.

When the data set is loaded into the IPRO Allegro Analyzer initially, all the doc-uments for the Case are available in the Documents panel, including all the Microsoft PowerPoint documents which show a count of (3) under File Types in the Filters pane.

The ingestion rule, PPT, appears in the Non-Indexed Files by Rule list and is selected in the Filters’ View panel by default. Any additional ingestion rules set up for the Case are also selected by default.

By deselecting the ingestion rule in the Filters’ View panel and clicking , the filter count shown for Microsoft PowerPoint will decrease from the original count of (3) to (0).

When an ingestion rule is selected, the filter counts increase.



The Total Documents count, shown in the Filters pane, will not change after

clicking . The PowerPoint documents are still displayed in the Documents panel.

The button is independent of the button.

Clicking in conjunction with updating, will change the Total Documents count in the Filters pane.

In the above scenario, if was clicked after updating, then Total Docu-ments count changes from 9 to 6 and the PowerPoint documents do not dis-play in the Documents panel.

Creating Filter SetsThe default Filter tab is called Filter Set 1 upon opening a Case. A Filter Set contains the filtered results on the data set. Filter Set n, where n is a number assigned by IPRO Allegro, is a placeholder name. Filter Sets can be created, saved, duplicated, deleted, loaded (opened), and closed.

Each time a new filter is created, the complete document set is returned.

1. Alternate click a Filter Set tab or an Advanced Filter Set tab.

2. Choose New > Filter Set or Advanced Filter Set from the menu. The tab displays the selected filter type.

3. Click to load the documents for the Case.

4. Proceed to the applicable section: Basic Filtering on page 2-48 or Advanced Filtering on page 2-49.

Basic Filtering1. Expand the Filters’ View panel, and select from the following:

• Compound Complete - Click the drop-down list and choose Off if you do not wish to include the related documents. Otherwise, com-pound complete is enabled by default to return the related docu-

Creating Filter Sets


ments. See the section Showing Parent/Child Relationships in the Filtered Set on page 2-27.

• De-duplication Level - Click the drop-down list and choose a de-duplication level: Case, Collection, Custodian, or None. Case Level is the default setting. See the section De-duplication Levels on page 2-56 for additional information.

• NIST/Hash Matches - By default, this is set to Off. If set to On NIST/Hash Matches are included in the set. See the section Enabling NIST/Hash Matching on page 2-58 for additional informa-tion.

• Non-Indexed Files by Rule - Select the rules to filter by. The rules are created in the IPRO Allegro Administrator. See the IPRO Allegro Administrator Guide, Chapter 2, IPRO Allegro Administrator, and the section Ingestion Rules on page 2-55 for information about creating ingestion rules.

2. Click .

3. Begin to select/deselect from the Filter types as described in the section Filtering by Filter Types and their Categories on page 2-32.

4. Click .

5. (Optional) Proceed to the section Working with Basic or Advanced Filter Sets on page 2-71 to save the filter results.

Advanced FilteringFor Advanced Filtering, a Rules pane appears with the first Rule, Rule 1. Advanced Filtering employs the use of Rules. Each Rule is executed on every single document in the order in which they were defined.

There are two types of Advanced Rules:

• Parent (New Rule) - OR logic is applied. When selecting a new rule, all categories are selected by default for every Filter type.

• Child (New Search-In-Results Rule) - AND logic is applied. Child rules are treated as sub-rules. Their scope is limited to the parent rule they are tied to. When selecting a new search-in-results rule, all categories are deselected by default for every Filter type.



There may be cases where one Rule may contradict another Rule, but this will not impact the overall process because the last Rule to “touch” the file will be the effective rule.

There is no limit in the number of Rules that can be created for a single Advanced Filter Set n tab.

Rules pane

Three buttons appear at the bottom of the Rules pane: ,

, and . When an advanced filtered set is saved as a Snapshot, these buttons will not appear in the Rules pane.

Rule 1 includes all Domains, E-mails, Custodians, etc.; everything is selected. To see the rule’s details, place the mouse pointer over the rule.

Rule 1 has the default title <New Rule> until assigned a different title.

Filters pane

The Filters pane contains an Exclude Rule option and a field to enter the Title for the Rule.

Each time New > Advanced Filter Set is chosen from the menu, a new Advanced Filter Set n tab appears and the complete data set resets for the col-lection.



Creating Parent Rules

1. In the Filters pane, enter a descriptive rule title for Rule 1 in the Title field. The Title initially contains <New Rule> each time a new rule is invoked. The descriptive rule title appears in the Rule bar as shown here.

Each Rule bar will show the Rule’s Number, Title, and Description. The Rule’s description indicates whether the Rule action is Include or Exclude followed by the Filter types and their categories. Place the mouse pointer on the Rule bar to display a tooltip containing the complete rule criteria.

2. Expand the Filters’ View panel, click the Compound Complete drop-down list, and choose Off if you do not wish to include the related documents. Otherwise, compound complete is enabled by default to return the related documents. See the section Showing Parent/Child Relationships in the Filtered Set on page 2-27 and Compound Complete and Rule Types on page 2-56 for more information.

3. Expand the Filters’ view panel, click the De-duplication Level drop-down list, and choose a de-duplication level: Case, Collection, Custodian, or None. Case Level is the default setting. See the section De-duplication Levels on page 2-56 for additional information.

4. From the Filters pane, indicate if the rule is an exclude rule by selecting the option This is an exclude rule. By default, rules are include rules. Compound complete is applied on a per-rule basis. Therefore, a family with one excluded document will be excluded as a whole unless other rules bring it back in the family. See the sections Compound Complete and Rule Types on page 2-56 and Using Include Rules vs Exclude Rules on page 2-55 for additional information.

5. Begin to select/deselect from the Filter types as described in the section Filtering by Filter Types and their Categories on page 2-32.

6. Repeat steps 1 through 4 for each additional Rule you wish to create by

clicking or . See the section Creating Child Rules - Search-In-Results Rule on 2-52 for information on creating Search-In-Results rules.



7. Click after all the rules are created. (Note: Apply may be clicked after each rule is created to view the results for that given rule.)

8. (Optional) Proceed to the section Saving Filter Sets as Snapshots on page 2-71 to save the Filter Sets.

Creating Child Rules - Search-In-Results Rule

Search-In-Results rule are child (dependent) rules. These rules are tied to their parent rule. More than one child rule may be tied to a single parent rule. By default, all categories for each Filter type is deselected when creating a child rule.

1. Select the Parent rule in the Rules pane.

2. Click . A new rule line appears as shown here.

The Date Range for the document collection is shown by default for a child rule.

Tree hierarchy will be used to display the level of child (dependent) rules.

3. Expand the Filters’ View panel, click the Compound Complete drop-down list, and choose Off if you do not wish to include the related documents. Otherwise, compound complete is enabled by default to return the related documents. See the section Showing Parent/Child Relationships in the Filtered Set on page 2-27 and Compound Complete and Rule Types on page 2-56 for more information.

4. Expand the Filters’ View panel, click the De-duplication Level drop-down list, and choose a de-duplication level: Case, Collection, Custodian, or None. Case Level is the default setting. See the section De-duplication Levels on page 2-56 for additional information.

5. From the Filters pane, indicate if the rule is an exclude rule by selecting the option This is an exclude rule. By default, rules are include rules. Compound complete is applied on a per-rule basis. Therefore, a family with one excluded document will be excluded as a whole unless other rules bring it back in the family. See the sections Compound Complete



and Rule Types on page 2-56 and Using Include Rules vs Exclude Rules on page 2-55 for additional information

6. Begin to select from the Filter types as described in the section Filtering by Filter Types and their Categories on page 2-32.

7. Repeat steps 1 through 5 for each additional Rule you wish to create by

clicking or .

8. Click . (Note: Apply may be clicked after each rule is created to view the results for that given rule.)

9. (Optional) Proceed to the section Saving Filter Sets as Snapshots on page 2-71 to save the filter sets.



Parent Child Filter Example

Result set = A AND [(B AND C AND (D OR (E AND F))) OR (G AND H AND ((I AND (J OR K)) OR L)) OR (M AND N AND O) OR P]

Result set description:

All e-mails from 01/01/2010 to present sent by Marc to Carlos and Rene which contain the word ‘eScanIT’. Further reduce the result set to include

- only those documents which are Word, Excel, PowerPoint, PDF and do not contain the phrase ‘Release Notes’



- all those which contain the keywords ‘OCR’, ‘US’ within the 03/01/2010 to 07/01/2010 date range.

Expected total: 7

All e-mails from 01/01/2010 to present sent by Marc to Carlos, Peter, Nate, Tina, Yale, Victor which contain the word ‘Allegro’. Further reduce the result set to include:

- only those documents which contain the words ‘WPF’, ‘WCF’ and ‘Teleconfer-ence’ and do not contain the phrase ‘Release Notes’

- those documents which contain the words ‘WPF’, ‘WCF’ and ‘Teleconference’ and are not of file type ‘PDF’

- the documents which are in Spanish, Chinese, Russian.

Expected total: 6

All e-mails from 01/01/2010 to present sent by Marc to Carlos, Dean, Miles and Jason which contain the word ‘eCapture’ excluding those which were sent to Escalations (Jon or Thom) too; and all e-mails from 01/01/2010 to present sent/received/copied IPRO.

Expected total: 10

Expected total for result set: 7 + 6 + 10 = 23.

Using Include Rules vs Exclude Rules

By default, rules are Include rules. Exclude rules are not permitted at the par-ent rule level. Compound complete is applied on a per-rule basis. Therefore, a family with one excluded document will be excluded as a whole unless other rules bring it back in the family.

Categories that are selected for a Filter type are included and will display a set of documents that match the Filter’s category selections. Any deselected cate-gories for a Filter type will not be included in the filter sets.



For example, the selected Case contains a total of 39 documents, with 10 of these documents identified as Word documents. Therefore, to filter only Word documents, you would use the Include rule and deselect all File Types except Word. When applied, the results return 10 Word docs and all other document types are excluded because they were deselected under File Types.

To reduce this set of documents further, create a second Rule (Search-In-Results) and select a range of dates. Select the option, This is an exclude rule. When applied, the original set of 10 documents from Rule 1 is reduced to 3 documents that are OUTSIDE of the indicated date range. The other 7 docu-ments were within the date range and were removed from the result set.

Compound Complete and Rule Types

The type of rule, Parent or Child, returns different results when Compound Complete is ON. The following table describes the outcomes:

De-duplication Levels

De-duplication Level options are located in the Filters’ View panel for Regular filter sets and Advanced filter sets.

De-duplication levels include Case, Collection, Custodian, or None. If None is selected, all files that meet the filter criteria will be displayed in the Documents panel including duplicates. The default de-duplication level is Case.

Settings Results

Parent Rule with Compound Complete ON

The result set will contain documents that meet its filter criteria, plus all parents of those documents and all the children of those parent documents. The result set is a union among parent rules.

Child Rule with Compound Complete ON

The result set will contain any documents from the parent rule that meet the child rules; filter criteria, plus all parents of those documents and all the chil-dren of those parent documents. The result set is an intersection between parent and child rules.



Scenario A:

The following Case hierarchy example shows the number of instances (in parenthesis) that the same document exists for each Custodian. Notice that Custodians B and D are part of Collection #1 and Collection #2 respectively AND Collection #3.

Case

Collection #1

Custodian A (2)

Custodian B (2) - total of (6) for documents in this Collection

Custodian C (2)

Collection #2

Custodian D (1)

Custodian E (2) - total of (3) documents in this Collection

Collection #3

Custodian B (2)

Custodian D (1) - a total of (6) documents in this Collection

Custodian F (3)

The following paragraphs describe the total number of documents that are returned based on the selected de-duplication level.

Case level - it will return a total of 1 document, the first one it encounters; most likely from Custodian A.

Collection level - it will return a total of 3 documents; 1 for Collection #1, Col-lection #2, and Collection #3.

Custodian level - it will return 1 for each Custodian A, B, and C under Collec-tion #1; it will return 1 for each Custodian D and E under Collection #2; and it will return 0 for Custodians B and D and 1 for Custodian F under Collection #3. Custodian B and D exist in Collection #1 and Collection #2 respectively, hence it will return 0 for these Custodians.

None - it will return the same number of documents indicated in parenthesis for each Custodian depicted in the Case hierarchy example above.

Scenario B:



The following example depicts a typical structure (Compound Complete is turned on) that displays two e-mails with an attachment and a loose Word document.

E-mail

Word attachment for e-mail.

Word Document (loose)

E-mail

Word attachment for e-mail.

When de-duplicating at Case level, the Word document will be returned twice. If de-duplication is set to None, 3 Word documents are returned - two from the e-mails and the single loose document.

Selecting a De-duplication Level

1. Expand the Filters’ View panel, click the De-duplication Level drop-down list and choose one of the following: Case, Collection, Custodian, or None. Only one level at a time may be applied - one instance per result set.


• Click .

• Click .

• Click , click .

Enabling NIST/Hash Matching

Be default NIST/Hash Matching is Off. See the IPRO Allegro Administrator User Guide, Chapter 2, IPRO Allegro Administrator and the section Managing Hash Lists on page 2-22.

Turning NIST/Hash matching on will return the items that were suppressed via the NIST/Hash Matching option. If an item that matched a NIST list or a cus-tom Hash list was discovered as part of a compound complete document, it will remain in view. Parents, loose files, and attachments are eligible.



1. Expand the Filters’ View panel, click the NIST/Hash Matches drop-down list and choose On.


• Click .

• Click .

• Click , click .

Selecting Non-Indexed Files by Rule (Ingestion Rules) for Filtering

Ingestion rules are set (optionally) when a Case is added for a Client in the IPRO Allegro Administrator. See the IPRO Allegro Administrator User Guide, Chapter 2, IPRO Allegro Administrator and the section Setting Case Options on page 2-39 for additional information.

The default rule title that appears under Non-Indexed-Based Files is Non-Text-Based Files and excludes all graphic file types, PDFs, Windows Sound files, etc. If this rule does not appear, it was deleted for the Case. Additional rules that appear, if any, represent rules added for the Case.

The files selected for the ingestion rule or rules are available for view in the Documents panel, but the text will not be available for searching. However, the metadata will be present for filtering and reporting purposes.

Move the mouse pointer over the rule to display: The documents with the fol-lowing criteria were not indexed during ingestion: followed by the details for the rule.

Selection/deselection of the ingestion rule or rules updates the filter counts to increase/decrease respectively. See the section Adjusting Filter Counts on page 2-46 for additional information.

1. Expand the Filters’ View panel. By default, all ingestion rules are selected.

2. Deselect specific ingestion rules.




• Click .

• Click .

• Click , click .

Deleting a RuleThe first rule cannot be deleted. All subsequent rules may be deleted whether they are a Parent rule or a Child rule.

1. Select the rule in the Rules pane.

2. Click . A warning dialog appears prompting if you are sure you wish to remove the rule.


• Click to proceed with the removal of the rule.

• Click to cancel the removal of the rule.

Working with the Visualizations PanelThe Visualizations panel contains the following Filter tabs:

• Domains• Emails• File Types• Custodians• Collections• Languages• User Tabs

For each Filter tab, either a Pie Chart of a Bar Chart may be selected. If there is no data to display, a message appears “No data to plot”. For example, a col-lection may consist of documents only with no emails or associated domains.

Working with the Visualizations Panel


When the IPRO Allegro Analyzer is initially launched, the Domains tab is open. The top 10 Domains are depicted in a Pie Chart with a corresponding legend in the upper right corner. The numbers in the parenthesis represent a subset of the totals depicted in the Filters panel for the corresponding item. The Pie Chart contains percentages (of 100% total) for each slice. In the following fig-ure, the most common domain in the Case is Enron.com and represents 67% of the total.



By moving (not clicking) the mouse pointer on a slice, a number appears that matches the same number in the Legend for that particular slice. An example is shown in the following figure.



To display data in a Bar Chart, select Bar Chart in the upper right corner. The following figure shows the Bar Chart for the same data depicted in the Pie Chart in the previous figure.



By moving (not clicking) the mouse pointer on a bar, the description and its number appears at the top of the bar. This information matches the Legend for that particular bar as shown in the following figure.

To select the top number of Domains, click the drop-down arrow next to Dis-

play and select an option: Top 2, Top 5, Top 10 (default), or Top 20. This is available for each filter category.



For each Filter tab in the Visualizations panel, either a Pie Chart or Bar Chart may be selected, the number of top results may be selected for display, and the mouse pointer can be used to display the legend information for either a slice or bar.

Clicking a slice separates it from the pie. More than one slice may be selected. The selected portion of the pie is highlighted in the legend as shown in the fol-lowing figure.



Clicking a legend item also separates the slice from the pie. More than one item may be selected from the legend. Items that are selected are used for fil-tering as described in the section Filtering Data using the Visualizations Charts on page 2-66.

Filtering Data using the Visualizations ChartsWhen filtering is done using the Filters panel, the results can be viewed in the Visualizations panel. For example, if filtering is done to see all the Excel docu-ments in the Case, the charts will update accordingly. When filtering is done through the Visualizations Charts, the Filters panel (filter type checkboxes) updates accordingly.

Select the Visualizations Panel and then select a Filter type (Domains, Emails, etc.)

From either the Pie Chart of the Bar Chart, the following actions can be per-formed for the Filter types using the context menu (alternate click the sepa-rated pie slice, the selected bar, or the selected legend item).

• Deselect Items - This is the same action as if deselecting a specific item for a Filter Type in the Filters pane. This is a Basic Filter action.

• Exclude Items - This is the same action as if creating a new Advanced Filter Set via the Filter Set tab context menu, clicking New Search-In-Results Rule, selecting the option This is an exclude rule, and assigning a Rule Title.

When using the Visualizations, an Advanced Filter Set is automatically created when starting from a Basic filter. (Note: If an Advanced Filter Set was already created via the Filter Set tab context menu, and contains one or more rules, additional rules may be created using the Exclude Items option.)

The Rule contains the default Rule 1 (Include everything) and a New Search-In-Results rule. The option This is an exclude rule is selected and a Rule Title is assigned based on the exclusion, e.g. Exclude by File Type. The filter criteria in the child rule is set to match the items



selected through the chart(s). Additional rules may be created at this point prior to saving as a Snapshot.

• Target Items - This is the same action as if creating an Advanced Filter Set via the Filter Set tab context menu, clicking New Search-In-Results Rule, assigning a Rule Title, and selecting item(s) from the Filters pane. Note: All items are deselected by default.

When using the Visualizations, an Advanced Filter Set is automatically created when starting from a Basic filter. (Note: If an Advanced Filter Set was already created via the Filter Set tab context menu, and contains one or more rules, additional rules may be created using the Target Items option.)

The Rule contains the default Rule 1 (Include everything) and a New Search-In-Results rule. A Rule Title is assigned based on the exclusion, e.g. Drill Down by File Type. The filter criteria in the child rule is set to match the items selected through the chart(s). Additional rules may be created at this point prior to saving as a Snapshot.

• Tag As - See the section Applying Tags using the Visualizations Charts on page 2-69 for information on tagging documents in the Case using the Visualizations Charts.



Filtering from a Snapshot

From a saved snapshot, further filtering may be done via the context menu. Exclude Items, Target Items, and Tag As are available from the context menu. Deselect Items is not available when filtering from within a saved snapshot.

Advanced Filter Sets are created for either the Exclude Items or the Target Items context menu options.

For example, three initial file types exist: Word, PowerPoint, and Excel.

From here, the first Advanced Filter Set is created which excludes PowerPoint, leaving Word and Excel. The Advanced Filter Set rules are as follows:

Rule 1 everything is selected

Rule 2 Exclude by File Type PowerPoint

At this point, the Advanced Filter set is saved as a Snapshot.

From the saved snapshot, additional filtering may be done such as Target Items. For example, out of the remaining Word and Excel file types, you may wish to Target Word (alternate click the pie chart slice, bar chart bar, or legend under File Types) and choose Target Items.

When this happens, a duplicate of the saved snapshot opens under a new Advanced Filter Set tab and now displays the additional Rule regarding target-ing.

Therefore, the new Advanced Filter Set rules are as follows:

Rule 1 everything is selected (same as the initial saved snapshot)

Rule 2 Exclude by File Type PowerPoint (same as the initial saved snapshot)

Rule 3 Drill Down by File Type Word

The new Advanced Filter Set Visualizations Chart show Microsoft Word as the only remaining File Type from the original three.

This Advanced Filter Set may be saved as a new Snapshot.



Applying Tags using the Visualizations ChartsWhen tags are applied to one or more documents in the Collection, they appear in User Tags as shown in the following figure.

The previous figure shows the top 5 user tags that exist for the Collection. In this example there are 1,366 documents in the Collection with the User Tag Hot Doc.

Use the Display drop-down menu to display fewer than the top 5 or more than the top 5.



Tags can be applied to a group of documents represented by the selected pie chart slice, bar chart bar, or legend. For example, all PDF documents can be tagged Privileged. The following figure shows the PDF slice is selected in the File Types tab. The context menu Tag As is open and shows the expanded Confidential category. When Privileged is selected, all PDF items will be assigned the Privileged tag.

Working with Basic or Advanced Filter Sets


Tags can be applied to all the documents in a filtered set at once. This is the same action as if applying tags using the Tags Panel where a specific tag can be applied to all documents in a filter set from the tag’s context menu (see the section Applying Tags from the Tags Panel on page 2-21) or from the docu-ment’s context menu (see the section Applying Tags to Documents on page 2-21).

In Visualizations, use the option Target Items as described in the section Fil-tering Data using the Visualizations Charts on page 2-66. Once the filtered set of targeted items is created, user tags can then be applied to all the docu-ments in the filter set.

When User Tags are applied via the Documents Panel, click to see the updated charts in the Visualizations User Tags.

Working with Basic or Advanced Fil-ter SetsSaving Filter Sets as SnapshotsFilter Sets (basic or advanced) can be saved as Snapshots and later exported from the IPRO Allegro Administrator.

After filtering is done on the data set, alternate click the Filter Set n tab (or Advanced Filter Set n tab) and choose Save As Snapshot from the context

menu. Or, click and choose Save Snapshot. The Save As Snapshot dia-log appears.



Enter a meaningful name for the filter set. By default, IPRO Allegro Analyzer will display the date and time stamp (Military format) as a description for the filtered data set. The date is displayed as YY_MM_DD and the time is displayed as [HH:MM].

This date and time stamp may be deleted, modified, or appended with addi-tional descriptive information. The following figure shows the default tab (Filter Set 1), and three saved tabs, 11_03_23_[15:27], 11_03_23_[15:29]Claims, and Spreadsheets 4th QTR.

In the previous figure, the current tab, Spreadsheets 4th QTR, has a lighter color background and is slightly larger than the other tabs.

Exporting a Saved Filter SetA regular filter set or an advanced filter set can be exported to a .TXT file. It is not necessary to save the filter set beforehand. The first line of the .TXT file will contain the Case name and the ID; e.g. SEC vs Enron [23], followed by fil-ter types and criteria, e.g.

custodians [Symes]

collections [PA, NJ]

dates [5/22/1991-9/22/2010]

languages [English]


• For a regular filter set, alternate click the Filters Pane title name to display the context menu.



• For an advanced filter set, alternate click the Rules Pane title name to display the context menu.

2. Choose Export Filter Rules to open the Specify Export File Name dialog.

3. Indicate the path and filename for the filter set. The default extension is .TXT.

4. Click Save. An Information dialog appears indicating where the rules were exported.

5. Click OK. The following figure shows an example of an exported rule.

Duplicating a Saved Snapshot or Filter SetDuplicate tabs can be used for comparison purposes or for making a subset of the filtered data.



1. Alternate click the tab you wish to duplicate and choose Duplicate Filter Set from the context menu. The duplicate tab appears with the name Fil-ter Set n (or Advanced Filter Set n).

2. Alternate click the duplicate tab and choose Save As Snapshot from the context menu.

3. In the Save As Snapshot dialog, enter a new name.

4. Click . The new tab is created with the new name. The dupli-cate Filter Set n (or Advanced Filter Set n) tab may be closed.

Closing Filter Sets or SnapshotsAlternate click the tab you wish to close and choose Close Filter Set from the context menu.

Loading a Saved SnapshotWhen Filter Sets are saved for a Case as Snapshots, they are listed in the IPRO Allegro Analyzer menu for loading in the future. All saved Snapshots are shown for the Case.

1. Click to open the IPRO Allegro Analyzer menu. The Recent Snap-shots are listed in the submenu.

2. Click a Snapshot to load it.

Opening Saved SnapshotsOne, several, or all snapshots can be opened at once.

1. Click to open the IPRO Allegro Analyzer menu.



2. Choose Open Snapshot(s). The Open Snapshots dialog appears either in collapsed form as shown here:

or in expanded form as shown here:.

If necessary, expand the Open Snapshots dialog by clicking the down arrow to the left of Snapshots (n). The snapshots are sorted by cre-ation date with the most recent at the top.

The grid columns can be filtered. See the section Filtering Grid Columns on page 2-77 for details on filtering grid columns.

3. Select the snapshot(s) to be opened by clicking the box for the Snapshot in the Select All column. To open all the snapshots, click the box to the left of Select All.

4. Click . The selected snapshot(s) open.

5. Select the Snapshot tab to view the documents.

Deleting Saved SnapshotsIf a snapshot was selected for exporting in the IPRO Allegro Administrator, it cannot be deleted. A prompt dialog appears when this is the case. One, sev-eral, or all snapshots can be deleted at once.



1. Click to open the IPRO Allegro Analyzer menu.

2. Choose Delete Snapshot(s). The Delete Snapshots dialog appears either in collapsed form as shown here:

or in expanded form as shown here:.

If necessary, expand the Delete Snapshots dialog by clicking the down arrow to the left of Snapshots (n). The snapshots are sorted by cre-ation date with the most recent at the top.

The grid columns can be filtered. See the section Filtering Grid Columns on page 2-77 for details on filtering grid columns.

3. Select the snapshot(s) to be deleted by clicking the box for the Snapshot in the Select All column. To delete all the snapshots, click the box to the left of Select All.

4. Click . The Question dialog appears prompting to confirm the deletion.

5. Click OK. The Delete Snapshots dialog closes.



Filtering Grid Columns

Whenever a grid column displays , that column can be filtered.

To open the Filter box, click located in the column heading. The Filter box appears as shown in the following figure:

The filter box will show the selected column’s criteria at the top. In the above figure, the filter box shows the Snapshot Type criteria. This information changes based on the selected column. The rest of the Filter box has the same options regardless of the column that is selected for filtering.

Filtering without Operators

To open the Filter box, click located in the column heading.

To filter without operators, select one or more criteria for the column. For example, to display only those Snapshot types that are Basic, select Basic. Click outside the Filter box to close it. The grid displays Basic snapshots only.

Advanced snapshots are hidden from view. Notice that the Filter icon changes appearance to indicate the column was filtered.

Filtering with Operators (Relational, Logical, Other)

1. To open the Filter box, click located in the column heading.



2. Under ‘Show rows with value that’, click the drop-down list to display the list of operators:

• Is equal to • Is not equal to• Starts with• Ends with• Contains• Does not contain• Is contained in• Is not contained in• Is less than• Is Less than or equal to• Is greater than• Is greater than or equal to

and enter criteria in the field.

For example, to find a Snapshot name starting with ‘Ex’, select the oper-

ator ‘Starts with’, enter ‘Ex’, optionally click to match case, and click

. The grid will display all Snapshot names beginning with ‘Ex’.

The center drop-down list contains the logical operators: or, and. When defining a second criteria in conjunction with the first criteria, use a logi-cal operator.

In the above example, the criteria were Snapshot names starting with ‘Ex’. Select the logical operator and. By adding another criterion, such as ‘l’ and selecting the operator ‘Ends with’, the grid will return all Snapshot names beginning with ‘Ex’ AND ending with ‘l’. It excludes any other Snapshot names that begin with ‘Ex’ and end with anything but ‘l’. The or logical operator would return all Snapshot names that begin with ‘Ex’ OR end in ‘l’.

3. Click to display the filtered results in the grid.

Running Reports


Clearing Filters

To open the Filter box, click located in the column heading.

Click to clear the filters and reset the grid. Click outside the Filter box to close it.

Running ReportsTo facilitate ease of use, reporting is available from the IPRO Allegro Analyzer and uses the same report wizard interface as in IPRO Allegro Administrator.

• Case - entire case• Collection(s) - one or more selected collections• Custodian(s) - one or more selected custodians• Snapshot(s) - one or more selected snapshots

Report types include Summary and Detail.

Summary Reports• File Summary - groups the files ingested by file category. The report dis-

plays the total number of files, the total size of the files and the mini-mum and maximum modified date grouped by file category.

• Custodian Summary - groups the files ingested by custodian while differ-entiating original files from duplicates. For each custodian, the report displays the total number of files, the total size of the files and the mini-mum and maximum modified date, grouped by file category.

• Duplicate Summary - groups the files ingested by file category, separat-ing each category into original files and duplicates. For each group (orig-inal or duplicate), the report displays the total number of files, the percentage relative to the total and the total size of the files.

• Error Summary - groups the issues encountered during ingestion by file category. For each category, the report displays the total number of issues encountered, separating each category into errors and warnings. For Container errors, lists the container types and the number of errors and warnings for each.



• Keyword Hits Summary - lists the terms identified within a filter set. Contains two sections: Keyword Hits on Include Rules and Keyword Hits on Exclude Rules. For each search term, the report lists number of doc-uments, total hits, body, metadata, and unique documents. A summary of total documents, hits, body, metadata, and unique documents appears for both Include Rules and Exclude Rules. Report is only avail-able when scope selected is “Snapshot”.

Summary Reports are generated in an 8.5 x 11 page format. The report page may be sized using the zoom setting options: Full page, Page Width, and vari-ous percentage sizes (10% 25%, etc.) The footer for each page has a date and time stamp and page numbering e.g., 1 of 1, 1 of 2, etc.

Summary Reports can be sent to a pre-configured printer.

Summary Reports can be saved to the following formats:

• Acrobat (PDF) file• CSV (comma delimited)• Excel 97-2003• Rich Text Format• TIFF file• Web Archive• XPS document

Detail Reports

Detail reports are saved out to a .CSV file.

• File Detail - lists detailed information of all the files ingested. Report is output to a comma-separated values (CSV) file.

• Custodian Detail - lists detailed information of all the files for each custo-dian, identifying if file is a duplicate or not. Report is output to a comma-separated values (CSV) file.

• Duplicate Detail - lists detailed information of all the files ingested, iden-tifying if the file is a duplicate or not. Report is output to a comma-sepa-rated values (CSV) file.

• Error Detail - lists detailed information about all the issues encountered during ingestion, identifying if the issue was an error or a warning. For Container errors, lists the container types and the number of errors and

Running Reports


warnings for each. Report is output to a comma-separated values (CSV) file.

• Keyword Hits Detail - lists detailed information about all documents where the term/word was found, including document ID, name, and hit count. Report is output to a comma-separated values (CSV) file. Report is only available when scope selected is “Snapshot”.

Choosing a Report

A Report Wizard is used to facilitate the ease of generating reports for a Case. After a report is run, it can be cleared/reset via the context menu on the report’s tab. More than one report can be run for a Case. Each separate report has its own tab.

1. Select the Case in the Navigation tree.

2. Click the Report tab. The first screen appears with scope selections.

Select a scope and then select one or more items for the scope. For example, for the Custodian scope, one or more Custodians may be selected. The Case scope encompasses the entire Case.



3. Click . The Report Type screen appears.

Select a report type. Note: The Keyword Hits Summary and Detail reports are available only for the Snapshot(s) scope.

Select the report’s sub-type. For detail reports, browse to a path and filename.

Select a unit for the file sizes from the drop-down list. The choices are KB, MB, GB. Auto is the default setting and converts values to the clos-est file size unit.

Running Reports


4. Click . The Final Step screen appears.

5. Click . If a detail report was selected, click the link to view the saved detail report. If a summary report was selected, the report appears in the Report window.



The Report n tab changes to the name of the Report selected and the scope, e.g. File Summary by Case. The first page of the report contains the Report Name, Scope, and Selected Criteria. The next page (and sub-sequent pages) contain the report data as shown here:

Working with the Report Tabs

Alternate click a Report tab to display the context menu options:

• New - Displays a new Report n tab in addition to the existing tab(s) already displayed.

• Reset - Clears the present report data and changes the tab back to Report n.

• Close - Closes and discards the report data.

Exiting IPRO Allegro™ Analyzer


Using the Report Toolbar

To refresh the Report window, click .

To zoom in or out, use the slider bar located in the lower right corner of the Report window. Specific zoom percent-ages, Page Width, and Full Page are located in the drop-down menu.

To navigate through a multipage report, click the arrows located in the toolbar

. The |< moves to the first page in the report. The >| moves to the last page in the report. The < and > move to the previous page or the next page, respectively. To move to a specific page, enter the page number in the box and click to the right of the page number box.

To save the report, click and select a format from the drop-down list.

To print the report, click to display the Windows Print dialog.

Exiting IPRO Allegro™ Analyzer

Click and choose .

IPRO Allegro™ Administrator A-1

Appendix A Metadata Fields

For this current version of IPRO Allegro, the supported metadata fields for the data load files are:

BEGDOC

ENDDOC

BEGATT

ENDATT

NativeRelativePath

TextRelativePath

DocumentID

ParentDocumentID

ContainerPath

DuplicateOf

GUID

CollectionID

CollectionName

CustodianID

CustodianName

VolumeName

ExportVolumeRange

Name

Path

AbsolutePath

FileType

CategoryName

DateCreated

DateModified

Appendix A, Metadata Fields

A-2 IPRO Allegro™ Administrator

Size

MD5Hash

SHA1Hash

Languages

EmailSentTime

EmailReceivedTime

AppointmentStartTime

AppointmentEndTime

EmailSubject

EmailMessageClass

SenderNames

SenderSmtpAddresses

SenderSmtpDomains

SenderExchangeAddresses

[To]Names

[To]SmtpAddresses

[To]SmtpDomains

[To]ExchangeAddresses

[CC]Names

[CC]SmtpAddresses

[CC]SmtpDomains

[CC]ExchangeAddresses

[BCC]Names

[BCC]SmtpAddresses

[BCC]SmtpDomains

[BCC]ExchangeAddresses

EmailConversationTopic

EmailConversationIndex

IPRO Allegro™ Administrator A-3

EmailReadReceiptRequested

EmailDeliveryReportRequested

EmailImportance

EmailSensitivity

EmailRead

EmailLastVerbExecuted

EmailLastVerbExecutionTime

TaskStartDate

TaskDueDate

TaskStatus

TaskCompletePercentage

TaskOwner

Appendix A, Metadata Fields

A-4 IPRO Allegro™ Administrator

IPRO Allegro™ Administrator B-1

Appendix B Ingestion Manager Utility

OverviewThe IPRO Allegro Ingestion Manager Utility is used to assign the number of ingestion service instances to be installed on a worker machine. It automatically determines the number of cores and assigns the same number of instances; for example, 4 cores, 4 instances. The maximum assignment of services is two times the number of cores.

The command line interface can be used to assign more instances if necessary; however, increasing the number of ingestion service instances does not necessarily mean better performance. The hardware resources determine the efficacy of increasing the number of service instances.

The services the IPRO Allegro Ingestion Manager Utility manages are:

• EcaIngestionServiceHost• EcaQueueReader

Service instances can be stopped, started, or uninstalled from the IPRO Allegro Ingestion Manager Utility.

Binaries (.DLLs) can be updated from the IPRO Allegro Ingestion Manager. However, this update will not update the .CONFIG and .LOG4NET files.

The IngestionManager directory is stored under C:\Program Files\IPRO Tech\Allegro by default. This directory contains the IngestionManager.exe which is used to start the IngestionManager if it is not already running on the worker machine.

During the IPRO Allegro installation, the Utility is launched and displays the default number of service instances based on the worker’s core count. One service instance per core will be running by default.

Appendix B, Ingestion Manager Utility

B-2 IPRO Allegro™ Administrator

The following figure shows the Utility with 2 service instances ready to be started.

Do one of the following:

• To start two or more service instances at once, click .

• To start an individual service instance in the grid, click .

The Status changes to Starting then to Running as shown in the follow-ing figure.


Reconfiguring the Services

The initial defaults can be reconfigured if necessary. If you wish to stop and uninstall all the services at once, reconfiguring will automatically do this. If you wish to keep one or more service instances, proceed to the section Stopping and Starting Service Instances on page B-4.

1. From the IPRO Allegro Ingestion Manager Utility, click to display the Reconfigure dialog.

2. From the Number of service instances drop-down list, select the number of service instances to run. Note: The static value 0 is used to uninstall the service instances. See the section Uninstalling the Service Instances on page B-4 for information on uninstalling.

3. Enter the same credentials that are used to access services through the Microsoft Management Console.

4. Enter the name of the Logging Service Machine. This is the machine run-ning the EcaLoggingService.

Ensure that IPRO Auth Service is started and running under Services in the Microsoft Management Console before reconfiguring.



5. Click OK to install the service instance(s).

In the above figure, there is one instance installed for both services: EcaIngestionServiceHost1 (under Ingestion Name column) and EcaQueueReader1 (under QueueReader Name column).


• To start two or more service instances at once, click .

• To start an individual service instance in the grid, click .

Stopping and Starting Service InstancesService instances can be:

• individually started by clicking next to the service instance in the grid.

• individually stopped by clicking next to the service instance in the grid.

• started all at once by clicking

• stopped all at once by clicking

Uninstalling the Service InstancesAll service instances will automatically be stopped and uninstalled. Ensure that any jobs in the IPRO Allegro Administrator Unfinished Jobs pane are not cur-rently being ingested.


1. From the IPRO Allegro Ingestion Manager Utility, click to display the Reconfigure dialog.

2. From the Number of service instances drop-down list, select 0. It is not required to enter the credentials.

3. Click OK.

About the Service Instance Subdirectories

The Services subdirectory contains separate directories numbered according to the ingestion service instance. In the above figure, there are two subdirecto-ries under Services: 1 and 2, indicating that two instances were initially installed.



Each Instance subdirectory contains the following subdirectories:

• EcaIngestionServiceHost - handles the ingestion processing automati-cally

• EcaQueueReader - retrieves the ingestion tasks for the IPRO Allegro Ingestion Service

These directories serve as a template for the services and contain an encrypted CONFIG file.

Updating Binaries (.DLLs)Updating the .DLLs automatically will stop all the services and update the bina-ries in the following directories:

C:\Program Files\IPRO Tech\Allegro\...\EcaIngestionServiceHost

C:\Program Files\IPRO Tech\Allegro\...\EcaQueueReader

The .CONFIG and .LOG4NET files will not be updated.

1. From the IPRO Allegro Ingestion Manager, click . The Update Confirmation dialog appears.

2. To proceed with the update, click . Otherwise, click .

Command Line


Command Line

The IPRO Allegro Ingestion Manager can be run from the command line. The following functions can be run from the command line:

• Install• Uninstall• Start all services• Stop all services• Update Binaries (.DLLs)

To view the command line options, run IngestionManager /?

InstallationWhen calling from within the context of an install, the command line path is:

Ingestion Manager/install/NI=auto/U=<InputUsername>/P=<InputPassword>

Followed by:

IngestionManager/startall - this will start all the services.

UninstallIngestionManager/uninstall - this will stop all running services and uninstall the services.

Utility Command Line OptionsThe following commands are for invoking the functions for the Ingestion Manager Utility. Parameters may be in any order.

Note: When /install is not used only one of the remaining optional arguments (/update/uninstall /startall /stopall) may be used.

IngestionManager/install/NI=<NumInstances>/U=<username>/P=<password>/L=<LoggingServiceMachineName>

or

This section is for System Administrators.



IngestionManager [/update/uninstall] [/startall] [/stopall]

where:

<NumInstances> is number (e.g. 2) of service instances to install or use auto in lieu of a number for the system to automatically detect the number of service instances to install based on the worker’s core number.

<username> is the User name for login credentials

<password> is the Password for login credentials

<LoggingServiceMachineName> Machine where the Logging Service is installed. This is an optional parameter.

Index

IPRO Allegro™ Analyzer Index-1

Ccompound complete

described 2-28disable 2-29documents display as 2-28rule types 2-56

CSV files, saving reports as 2-80custodian summary report

described 2-79Dde-duplication

levels explained 2-56detail reports

described 2-80dtSearch

stemming, searches 2-38duplicate summary report

described 2-79duplicates

include or exclude 2-26Eerror summary report

described 2-79Ffile summary report

described 2-79filter box

described 2-77filter sets

closing 2-74creating new 2-48duplicating saved 2-73exporting 2-72saving 2-71working with 2-71

filter typesdescribed 2-31, 2-33excluding 2-34filtering by 2-32viewing 2-30

filtersadvanced 2-49basic 2-48checkbox states, described 2-33

clearing 2-79filtering by types and categories 2-32filtering counts described 2-35

Ggrids

filtering 2-77filtering with operators 2-77filtering without operators 2-77

IIngestion Manager Utility

command line B-7default number of service instances B-1described B-1reconfiguring services B-3service instance subdirectory structure

B-5starting service instances B-2stopping service instances B-4uninstalling service instances B-4

IPRO AllegroAdministrator features 1-4Analyzer features 1-5before you begin 1-3components 1-3log files, described B-1supported metadata fields A-1workflow 1-4

IPRO Analyzerdocument detail pane described 2-13document set, navigating through 2-11exiting 2-85filtering data 2-26filters, sorting 2-31opening case, using menu 2-8searching, synonyms 2-39selecting a case 2-6starting 2-2workspace, customizing 2-9

Kkeyword hits summary report

described 2-80keyword searches

filter by 2-35types described 2-35

Index

Index-2 IPRO Allegro™ Analyzer

Mmetadata fields, supported A-1Nnavigating through reports

file summary 2-85Pparent child relationships

displaying in document pane 2-27printing

file summary report 2-85Rreports

saving to various formats 2-80types, described 2-79

ruleschild, creating 2-52described 2-49include and exclude 2-55parent, creating 2-51

Ssearching

all words 2-36any words 2-35Boolean 2-36Boolean examples 2-36fuzzy searching 2-39multiple keywords 2-41natural language 2-36phonic 2-38stemming 2-38

slideout panesHiding 2-9resizing 2-10showing 2-9

snapshotsclosing 2-74deleting saved 2-75loading saved 2-74saving filter sets as 2-71

summary reportsdescribed 2-80

Uuser

signing in as 2-6user guide

conventions used 1-6note icon, explained 1-6

Wworkspace

resizing components 2-9

allegroanalyzerguide3.1

Documents

program filesipro

spreadsheets

seasons resort

ipro allegro

parentchild

ipro allegro

ipro allegro

microsoft