The Visualize tab opens a page where you can select one or more existing visualizations of the data in your Elasticsearch indexes; you can also create a new visualization from this page. You can then build dashboards that display related visualizations.

Visualizations can also be created directly on a dashboard by selecting Edit > Add.

Siren Investigate visualizations are based on Elasticsearch queries. By using a series of Elasticsearch aggregations to extract and process your data, you can create charts that show you the trends, spikes, and dips that you need to know about.

You can create visualizations from a search saved from Discover , or start with a new search query.

Types of visualization

Table 1. Charts

Area, bar, and line charts

Compare different series in X/Y charts.


Display data in an x/y chart using upper and lower percentiles.

Bubble Diagram

Show data and parent/child relationships as bubbles.

Goal and Gauge

Display a gauge.

Heatmap Chart

Shade cells within a matrix.

Multi Chart

A visualization in which you can switch between other visualizations at will.

Parallel Lines Chart

Arranges several metrics on parallel columns.

Pie Chart

Display each source’s contribution to a total.

Radar Chart

A graphical method of displaying multivariate data in the form of a two-dimensional chart of three or more quantitative variables represented on axes starting from the same point.

Table 2. Textual

Analytic Table

Display the raw data of a composed aggregation.


Display free-form information or instructions.


Display a single number.

Tag Cloud

Display words as a cloud in which the size of the word correspond to its importance.

Topic Clustering

Perform significance and clustering analysis on full-text fields.

Table 3. Maps

Coordinate Map

Associate the results of an aggregation with geographic locations.

Enhanced Coordinate Map

Associate the results of an aggregation with geographic locations.

Region Map

Thematic maps where a shape’s color intensity corresponds to a metric’s value.

Table 4. Showing individual records

Graph Browser

Display Elasticsearch documents as nodes and Siren Investigate relations as links of a graph. Note: The Graph Browser is a very powerful visualization and is described in a separate section of the documentation.

Record Table Visualization

Show the documents matched by a query on an Elasticsearch index with enhanced features.

Scatter Plot

Show data in an x/y graph as scattered points.

Table 5. Time series


Compute and combine data from multiple time series data sets.

Visual Builder

Visualize time series data using pipeline aggregations.


Visualize events in chronological order.

Table 6. Interactive filters and relational navigation


Create interactive controls for easy dashboard manipulation.

Relational Navigator

Provide navigation between relationally-connected dashboards.

Customizing visualizations

You can update your visualization’s label or change the display color. For more information, see Customizing visualizations.