Siren Federate by Siren is optimized for distributed operations on Elasticsearch, providing low-latency, interactive responses. It enables capabilities like relational drill-downs and large real-time correlations for alerting and detection. Siren Federate is delivered as a plug-in for new or existing clusters. It adds a REST endpoint (/siren) with an extended Elasticsearch syntax API and a new join query operator, integrated with Search and Scroll APIs. No changes to the original APIs are required, allowing gradual adoption of the new capabilities.