Gravwell 4.1 introduces a new module - Enrich - that can add static data to every entry in a query. Sometimes you need to add static data to a dataset, such as the standard deviation itself across all entries in the dataset or annotations about the query, or you may want to fuse several data points from a resource. The enrich module provides this simple but important feature.
Fritz
Recent Posts
Enable Data Fusion & Pivot on Dataset Properties with the Enrich Module
Jan 19, 2021 9:51:59 AM / by Fritz posted in Data Fusion, Software Updates, Logging
Combine Datasets Like a Boss: Announcing Gravwell 4.1 & Compound Queries
Jan 6, 2021 9:14:59 AM / by Fritz posted in Data Fusion, Software Updates, Logging
The Gravwell team is happy to announce the release of Gravwell 4.1. A few highlights of what's included in the new release:
- Compound Query support
- Web UI based ingester
- A new “enrich” module
- Temporal mode in the “dump” module
- Internal performance and stability improvements
(Current users - visit the download page for instructions on updating. For a complete list of changes, see the Gravwell 4.1.0 release notes)
We’ll have a series of blog posts discussing the various features of Gravwell 4.1, but we wanted to get started with our favorites - Compound Queries.
Introducing the Gravwell CoreDNS Kit
Sep 15, 2020 2:17:53 PM / by Fritz posted in Security, kits, DNS
What’s in a Domain Name? That which we call a CNAME by any other AAAA record would still be used by malware to steal your data. This article introduces the Gravwell CoreDNS Kit, which provides dashboards, queries, and other resources to help you quickly analyze data from a CoreDNS instance using the Gravwell CoreDNS plugin.
PCAP collection and analysis on-demand with Gravwell Packet Fleet
May 27, 2020 8:30:00 AM / by Fritz posted in Network Analytics
Gravwell is designed to work with your data, in your infrastructure, and within your constraints. Whether you have petabytes of packet capture, data-at-rest sensitivity requirements, or are simply integrating existing infrastructure, Gravwell is built to enable a workflow that meets your needs. Today we’ll look at an example integration with multiple Google Stenographer installations, our new Gravwell Packet Fleet ingester, and a powerful new feature in Gravwell Big Bang - Actionables.