The Incident Analysis template is now available

The new Incident Analysis template is now available for download from The Incident Analysis template is an ArcGIS for the Military template for intelligence analysis. The template contains a map, tools, and supporting layers for incident analysis, and a geodatabase and spreadsheet with sample incident features. The sample data is notional, but it represents a typical incident reporting format.

The map’s layout is designed to be reusable and easily adaptable for your incident reporting products.

Incident Analysis Map

The map contains two group layers to help map and interpret incident data.  The Incidents group layer contains layers of incidents with appropriate symbology and definition queries that show activities during different periods of time.

Incidents in the last 72 hours

The sample incident features each have date and time information, and the template contains a tool that you can run to adjust the data so that the dates run up to the current day, simulating a current set of continuously updated data.

Adjust Sample Data Dates

The Analysis Results group layer contains layers showing results from running each of the incident analysis tools on the sample data.

The template includes seven tools that you can use to analyze incident data. These are:

  • Cluster Analysis
  • Count Incidents by LOC
  •  Find Percent Change
  •  Hot Spots by Area
  •  Incident Density
  •  Incident Hot Spots
  •  Incident Table to Point

Cluster Analysis – This tool takes an input incident layer and finds points within a specified clustering distance, then counts those points and displays the results with graduated symbols and incident counts. This tool can be useful for identifying the rough centers of clusters of incidents for visualization purposes.

Incidents and Clusters

Count Incidents by LOC – This tool relates incidents to nearby roads (or other linear features) and displays the counts of incidents closest to each road feature up to a specified distance. This tool can be useful for identifying roads that are frequent sites of activity.

Find Percent Change – This tool takes a set of boundary polygons (districts, for example) and two input layers of incidents representing different time periods. It counts the incidents in each district and displays the percentage change in incidents by district.

Here the incidents in the last 30 days are compared to incidents in the prior 30 day period.

The result shows (with symbology and labels) how each district’s count of events has changed over time.

Incident Hot Spots – This tool runs a Hot Spot (Getis-Ord Gi* statistic) analysis on the incident data to create a map of statistically significant hot and cold spots for the study area taken as a whole.

Hot Spots by Area – This tool divides up the incidents by a set of boundary polygons and runs a Hot Spot (Getis-Ord Gi* statistic) analysis on each one separately. This is useful for getting at locally significant hot and cold spots.

Hot Spots by Area

Incident Density – This tool creates a density surface from the incident points using parameters calculated using the Hot Spot (Getis-Ord Gi* statistic) analysis method.

Incident Density

Incident Table to Point – This tool takes a table (including Excel spreadsheets) with coordinate values in one of several systems (DD or DDM, DMS, UTM, MGRS, USNG, GARS and GEOREF) and generates point features.

Incident Table to Point The incident analysis tools are models and Python scripts, so you can inspect and modify them.

This entry was posted in Defense and tagged , , , , , . Bookmark the permalink.

Leave a Reply


  1. murtuzatahiri says:

    Can GPS location be used as incident points in Hotspot Analysis?

  2. bbooth says:

    Yes, any given set of points can be used as input for Hotspot analysis.
    There is more help for Hotspot Analysis here: