Summary: This page provides instructions for using the Application Investigation view in the Engineering Dashboard.
Introduction
Note that the Application Investigation view is not available when viewing data from a previous snapshot.
Accessible from the sidebar menu 
or by clicking the Application Components tile, this view enables investigation of the objects in the Application. Data is presented in a series of tables on the left and right hand side of the page enabling you to drill down from an Application right down to an individual object within that Application, and view the Rules that those objects have violated.
The default Health Measure used for this view is Total Quality Index, but you can change this using the drop down list box in the top right corner:
Application Browser
The Application Browser provides a hierarchical tree view of the Application, its modules and the individual projects and objects that make up the Application:
Selecting an item in the tree will do two things:
- Update the right hand side (see below) of the screen with a list of Rules that the item is violating - so for example, selecting the root Application in the tree will display ALL the Rules that have been violated in the Application. Selecting an individual object will only display the Rules that the selected object has violated.
- Update the circular "at a glance" views underneath the hierarchical object tree, to display:
- Objects: the number of objects that have violated a Rule for the selected item - if you select the root Application, the total number of objects that have violated at least one Rule will be displayed.
- Critical Violation/Violations: the number of Critical Violations or Violations of Rules that the selected item has - this value will always be equal to or higher than the value for the "Rules" circle (the display depends on whether only Critical Violations or ALL Violations are being displayed (see Data Filtering on Critical Violations)
- Rules: the number of Rules that the selected item is violating
When applications are large and flat (flat project structure), the number of items can be large, leading to slow loading and page rendering. A pagination mechanism has been designed in order to improving the usability: only a subset of items are loaded (~100 by default) and, upon scroll in the browser, more content will load in a lazy fashion with the message "Loading Next Items":
Available information
Selecting an item (Application, Module, Project, Object) in the left hand section will update the right hand section. The following information is available:
Rules
This section lists Rules that the selected item is violating. Rules are listed by the number of times they have been violated by the selected item (and all its constituent items in the case of an Application, Module or Project) and whether the Rule is critical (flagged with a red dot):
Click to enlarge
Note that an icon indicates the list you are working in:
| Column | Explanation |
|---|---|
| Name | Name of the Rule that the selected item is violating. |
| #Violations / #Critical Violations | The number of Critical Violations or Violations that the selected Rule has (the display depends on whether only Critical Violations or ALL Violations are being displayed (see Data Filtering on Critical Violations)). |
| Weight | Displays the compounded weight of the Rule in the parent Technical Criterion. The higher the value, the more weight the Rule carries. Clicking the Weight column header will sort the Rules as follows:
Compounded weight is calculated as follows: weight of the parent technical criterion X weight of the Rule |
| Critical Rule | A red dot in this column indicates that the Rule has been set as critical in the Assessment Model. |
Violations and Rule Documentation
Clicking a Rule in the right hand section will move the right hand panel over to the left hand side, and display a new panel containing:
- a list of objects that are violating the selected Rule, listed in alphabetical order
- a section containing documentation about the selected Rule
- Please see Violation table from the Risk Investigation view for an an explanation of the column headings Plan, Object Name Location, Risk and Status.
- In ≥ 2.9, when there are many violations, search button
helps to search for a specific violation (based on the object name location field).
- Note that when there are many violations to display, a "Show More" button will be available. By default, only 10 violations are displayed to improve performance. You can choose to display more using the various options (+10, +100 etc.). By default an upper maximum of 5000 violations is set when the "All" option is clicked. You can change the upper maximum if required (see the violationsCount option in Engineering Dashboard json configuration options).
Parameter Details
Click Rule, it displays parameter details section. This section displays the parameter name, technology, and value for the selected rule.
Parameter details will be displayed for the current snapshot as well as for the previous snapshot if the rule is "parameterized. The parameter detail section also displays the data for a selected rule when no violations. The parameter section displays a message "No parameter details available" if the selected rule does not have parameter details.
Source code
Selecting an object in the Violations and Rule Documentation section will move the right hand panel over to the left hand side, and display a new panel containing the source code of the selected object:
Note that analyzed source code from the following technologies is not visible in the Engineering Dashboard:
- PowerBuilder (using CAST AIP ≤ 8.3.12)
- VisualBasic (using CAST AIP ≤ 8.3.12)
- BusinessObjects
Please also note that in the current release of CAST AIP, the display of source code is limited in functionality:
- The source code is in fact a display of the entire file that contains the selected object, therefore display performance can be affected if the file is very large
- Bookmarks in the source code showing the location of the violation are not displayed, instead the entire object within the parent source code file is highlighted
- The source code does not currently show all violations for Rules that reference User Input Security elements, such as:
- OWASP security rules
- The Rule "Avoid direct or indirect remote calls inside a loop"
- Any Rule referencing copy/paste rules
Impacted objects/transactions
This section lists all impacted transactions for a given object (i.e. all the transactions that the selected object is participating in):
Click to enlarge
Column | Explanation |
|---|---|
| Transaction Name | Name of the object (i.e. transaction) that the selected object is participating in |
| Risk Level | Transaction Risk Index (TRI) value. |
| Access to the Transaction Investigation view |
- An icon indicates the list you are working in:
- When there are many items to display, a "Show More" button will be available. By default, only 10 items are displayed to improve performance. You can choose to display more using the various options (+10, +100 etc.). By default an upper maximum of 5000 items is set when the "All" option is clicked. You can change the upper maximum if required (see the violationsCount option in Engineering Dashboard json configuration options).
This view will only function when the following Health Measure filters are active:
- Robustness
- Security
- Efficiency
Technical Properties
Selecting an item (Application, Module, Project, Object) in the left hand section will update the right hand section. This section lists Rules that the selected item is violating (see above) and the object's Technical Context. This section displays the properties of the selected objects. It has two views:
- Global view: provides a description of the technical properties ("This section displays numeral information about the selected object e.g. number of lines of code").
- Detail view: lists the object's properties:
- Number of code lines
- Number of comment lines
- Number of commented code lines
- Coupling
- Cyclomatic Complexity
- Distinct Operands
- Distinct Operators
- Essential Complexity
- Fan In
- Fan Out
- Halstead Program Length
- Halstead Program Vocabulary
- Halstead Volume
- Integration Complexity
- Ratio of Comment Lines to Code Lines
Note that:
- Detail View provides a description "No Technical Properties available for this object" when there is no Technical Properties available for the selected object.
- An icon indicates the list you are working in:
Header icons
The following icons will be available:
| Educate | Click this icon to add the associated Rule to the Engineering Dashboard - Education list. |
| Download | Click this icon to export the list of violations to Excel. The resulting XLSX file will contain the following details:
|
