Do you find yourself using the simple or advanced query mode more often in the NetWitness investigation interface? Any ideas on improving the experience whether it is using the same format or including another alternative? Do you find yourself using a totally different method (search, report, dashboard...) to typically access the data?
Rarely use simple, since I can type faster than the drop-downs and populate on the screen. (especially when there are 100's of meta groups defined)
One improvement that is desperately needed: When using the "simple" query, we need to limit the "meta group" list to ones that are specifically created for searching. Need to add a checkbox in the meta-group management for "search query", those would not show up in the meta group pick list, but would be the only ones to show up in the simple query meta group list.
Might want to add one of these questions for the Profile/Meta/Column groups