This paper presents a layered approach to analysis and visualization of associations from events. The proposed approach provides different levels of abstraction for aggregating and analyzing events from heterogeneous data sources by using lists and customizable functions. Interfaces for creating lists and functions are also implemented for different levels of users. The effectiveness of the proposed approach is demonstrated through examples from criminal network analysis area.