1. At least one machine readable non-transitory storage medium having instructions stored thereon for providing intelligent suggestions in visualizing network security data, wherein the instructions when executed by at least one processors cause the at least one processors to perform the following operations: retrieving the network security data from one or more data sources; rendering the network security data for display on a user interface as a first force-directed node graph, wherein the first force-directed node graph has the network security data as nodes whose motion and position information are computed using an energy function; applying principal component analysis on the network security data to reduce dimensionality of the network security data and identify a first set of principal components of the network security data; and outputting a first message to the user through the user interface suggesting a first filter on the network security data based on the one or more principal components of the network security data.