Common Tasks using Filtering and Tagging

Make sure that a Files window is visible (use Window > Create > Files if not).

1. Using the Columns drop-down menu of the Files window, show the Status column.
2. Sort on the Status column by left clicking on it, or by right-clicking on the column header and selecting one of the sort options available.
3. Scroll down until an entry showing 5 Unknown is visible. Alternatively, type 5 on the keyboard to select the first entry of this type.

If you cannot locate a 5 Unknown file, it could be that your display filter options have been set up to not display unknown files. See Configuring Display Filter Settings on page 77 for more information about how to include Unknown files.

1. Right-click on a 5 Unknown entry, and select the menu item Status is 5 Unknown > Tag.
2. Apply a File filter on the Files window.

Alternatively:

1. Using the Columns drop-down menu of the Files window, show the Status column.
2. Right-click on the column header of the Status column, and select the Tag|Contains menu item.
3. Enter 5 in the Search string box, select Anywhere in the String Position group box and select Tag in the Action group box.
4. Click OK.
5. Apply a File filter on the Files window.

Assuming that the tags from the previous question are still in place, apply a File filter to a Machine window.

All machines now shown contain one or more tagged files, all of which are unknown.

This answer assumes a scan of a standard desktop is available.

1. In the Machines window, tag the standard machine.
2. Apply a Machine filter to an Application window.
3. Tag all the applications shown. Now, all standard applications are tagged.
4. Remove the Machine filter from the Applications window.
5. Toggle all tags in the Applications window. Now all non-standard applications are tagged.
6. Apply an Application filter in the Machines window. All machines containing any non-standard applications are shown.

Assuming no tags have been changed from the previous question

1. Using the Columns drop-down menu of the Machines window, show the Tagged Apps column.
2. Sort descending on this column, either by left clicking on the Tagged Apps column header or by right-clicking and selecting Sort Descending.

The machines at the top of the list now are the ones containing the most non-standard applications.

Make sure that a Directory window is visible (use Window > Create > Directory if not)

1. Tag the directory or directories of interest.
2. Apply a Directory filter to a Files window.

If you cannot see any directories, it could be that your memory options have been set up to not display directory data. See Configuring Memory Settings for more information about how to include directory data.

When no filters are applied to the Files window, the Copies column displays the total number of occurrences of each file entry. This includes multiple copies on the same machine in different directories.

When a Directory filter or Machine filter is applied to a Files window, the Copies value will always be 1. If two directories are tagged, the count will be 1 for those files that occur in only one of the directories, and 2 for those files that occur in both.

The same logic applies for tagged machines when a Machine filter is applied to a Files window.

This question is important for asset or hardware fields that contain information unique to a single computer, such as MAC addresses, and Asset numbers.

1. Show the column of interest in a Machines window.
2. Use the Tag menu item of the shortcut menu of the column header, and select Duplicates.

3. Apply a Machine filter to the Machines window. Any items shown are not unique across the population.

Make sure an Applications and a Machine window are visible.

1. In the Applications window, right-click on Microsoft in the Publishers column, and select the Publisher is Microsoft > Tag menu item.
2. Alternatively, use the Tags > Contains menu item from the Publishers column header shortcut menu and use Microsoft as the search string.
3. In the Machines window, apply an Application filter.

Make sure a Machine window is visible.

1. In the Machines window, click the Columns button. In the Select columns to display dialog box, expand the Memory category in the Available columns list, and check the Total Memory (Mb) item.
2. Sort by the Total Memory (Mb) column in ascending order.
3. Type 32 which moves focus to the first item with 32Mb or memory or more. Press the Up arrow to select the previous item in the list.
4. Right-click the highlighted item, and select Tag -> Rows Above.
5. Apply a Machine filter to the window. All machines visible have less than 32 Mb of memory

OR

Make sure a Machine window is visible.

1. From the Tag menu, select Query
2. From the Query form shown, expand the Memory item and double-click the Total memory (Mb) item.
3. From the drop-down list of choices, select is less than. Type 32 in the entry field.
4. Click OK to execute the query.

1. Follow the steps in the previous question to tag machines and applications and applying filters.
2. Show the LTags column in the Machines window by it from the Columns toolbar menu.
3. From the Tag toolbar menu of the Machines window, select Use Local Tags Once.

This instructs Analysis Workbench to use Local Tags for the next tag operation.

4. Again using the Tag toolbar menu of the Machines window, select Tag All.

This will give all items currently visible, a Local tag.

5. Remove all filters from the Machines window. All machines are now shown.
6. Using the Tag toolbar menu, select Untag All.

This will remove all of the Global machine tags set previously – but the information needed is stored in the Local tags so this is fine.

7. Apply a Local filter to the Machines window (or available from the Filters drop-down menu). The same machine selection as before step 1 is now visible.
8. Tag all visible machines (Use the Tag menu, for example).
9. Apply a Machine filter to the Applications window.

The applications now visible occur on machines with less than 32Mb of memory that contain at least one Microsoft application.

1. In all windows, enable the Link to Details options in the Configure drop-down menu.
2. In the Details window now shown in the right side of the screen, click the little c (Configure).

Make sure all four check boxes in the Detail window Links group are selected. Optionally, set the other controls to specify which details are shown for each window.

3. Click OK.

Now, whenever an item is clicked in one of the main windows, details for that item are displayed in the Details window. Because the Detail window Links are selected, clicking on items in the Details window moves the focused line in the main windows when items are clicked here.

For example, click on a file. A list of machines and directories where the files occur, along with various details of each occurrence of the file, is shown in the Details window. Click on one of these occurrences, and focus in all Machines windows is moved to the machine for this occurrence; the same happens for the directory in which it occurs. This logic extends to Machines, Directories and Applications as well.

This is typically the first step of application recognition – an unknown file is tagged, and all files in the same directory should be added to the library at the same time.

1. Apply a File filter to a Directories window. Now, all directories with tagged files in them are shown.
2. Tag the directory or directories that are of interest.
3. Apply a Directory filter to a File window. This now shows all files occurring in the tagged directories.

1. Clear all file tags in all windows.
2. In the Applications window, tag the applications in question.
3. Apply an Application filter to the Files window.
4. Tag all the visible files.
5. Apply a File filter to the Machine window.