The Record Table visualization and the Global Search interface allow you to open an individual record inside a floating, full-height panel, where you can explore it in depth. This panel is known as the Record View. The Record View provides options to view the record or its related data, which can be accessed by the tabs at the top of the panel.
The Record View can also be used to create, edit, or delete a record in an entity table.
To add a record to an existing dashboard, click Filter. This creates a filter in the target dashboard that focuses on that specific record.
The Record details tab displays all of the record fields and their associated values in a paginated table.
When you open a record view from a Record Table visualization, the Main fields of the table are those that relate to the record table’s columns. These fields retain the formatting from the original record table.
The Other fields section displays fields that are associated with the record, but are not displayed in the columns of the record table.
You can use the following viewing options to change how the records are displayed:
Show empty: Select this option to display empty fields in the record view.
Hide empty: Select this option to hide empty fields in the record view.
Fields per page: Select the number of fields that you want to display in the record view.
If you want to make sure that your viewing options remain the same after you log out of Siren Investigate, you can configure that in the
investigate.yml file and add the key
siren-record-view-options in an array as follows:
The JSON tab displays the record as it was retrieved from the records store, as a full-text JSON document.
The JSON document will include the original ingested record under the
_source property, as well as other useful properties like the record’s
_index and its
_score in the search.
The Linked tab displays all entities that are related to the current record, organized in a tree structure. It works the same way that the Graph Browser expands a node to its linked nodes.
The relational tree starts with the relations that are set up in the record’s entity table. Each relation displays the number of linked entities. You can expand a relation to display the list of linked entities.
Clicking on a linked entity expands it into a nested Record View. Clicking on the rightmost button in the card opens the entity in a new Record View, making that entity the new 'root' entity.
The Overview tab displays perspectives associated with the entity table from the Template scripts tab on the Data Model. These perspectives are used to display a custom Record View or to download the record as a file. You can associate more than one perspective to each entity table or child search. If more than one view perspective is associated, you can change the viewed perspective using the dropdown selector. To download a binary perspective, select the perspective from the Download as… options.
To permanently change the order of the view perspectives, you must update the order of the Record view perspectives list from the Template scripts tab of the Data Model.
When opening a record in Record view, the Overview tab only appears if the respective entity table or child search has at least one perspective associated.
For step-by-step instructions on how to create templates and downloadable reports see Templating and reporting.
For more information about managing and editing of Template scripts, see Template scripts.