Record view

The Record Table visualization and the Global Search interface allow you to open an individual record inside a floating, full-height panel, where you can explore it in depth. This panel is known as the Record View. The Record View provides options to view the record or its related data, which can be accessed by the tabs at the top of the panel.

The Record View can also be used to create, edit, or delete a record in an entity table.

To add a record to an existing dashboard, click Filter. This creates a filter in the target dashboard that focuses on that specific record.

The Record details tab

The Record details tab displays all of the record fields and their associated values in a paginated table.

When you open a record view from a Record Table visualization, the Main fields of the table are those that relate to the record table’s columns. These fields retain the formatting from the original record table.

The Other fields section displays fields that are associated with the record, but are not displayed in the columns of the record table.

Configuring the viewing options

You can use the following viewing options to change how the records are displayed:

  • Show empty: Select this option to display empty fields in the record view.

  • Hide empty: Select this option to hide empty fields in the record view.

  • Fields per page: Select the number of fields that you want to display in the record view.

If you want to make sure that your viewing options remain the same after you log out of Siren Investigate, you can configure that in the investigate.yml file. Open the investigate.yml file and add the key siren-record-view-options in an array as follows:

investigate_access_control:
  enabled: true
  session_termination_whitelist:
    local_storage_keys: ['siren-record-view-options']

The JSON tab

The JSON tab displays the record as it was retrieved from the records store, as a full-text JSON document.

The JSON document will include the original ingested record under the _source property, as well as other useful properties like the record’s _id, its _index and its _score in the search.

The Linked tab

The Linked tab displays all entities that are related to the current record, organized in a tree structure. It works the same way that the Graph Browser expands a node to its linked nodes.

The relational tree starts with the relations that are set up in the record’s entity table. Each relation displays the number of linked entities. You can expand a relation to display the list of linked entities.

Clicking on a linked entity expands it into a nested Record View. Clicking on the rightmost button in the card opens the entity in a new Record View, making that entity the new 'root' entity.