Gravwell Resources
Learn about everything from customer success stories, product info, to viewpoints from
the core team.
Blog
Security teams using legacy SIEMs face rising data volumes, limited resources, fragmented tools, and growing operational complexity, while outdated architectures and pricing models make security data costly to collect, difficult to manage, and slow to investigate.
All
Four Tips to optimize your search through enhanced query structure
What's in a sysmon event - eventid 5, process termination
Gravwell 4.2.4 and Query Studio Tour
Gravwell 4.2 Sneak Peek - Data Explorer
IPMI and Gravwell Part 2: Making an IPMI Kit
IPMI and Gravwell Part 1: Building an IPMI Ingester
Grouping Related Entries with the Transaction Module
Enable Data Fusion & Pivot on Dataset Properties with Enrich Module
DOCUMENTATION
All Gravwell documentation is open to everyone.
If you’re just starting out with Gravwell, we recommend reading the Quick Start first, then moving on to the Search pipeline documentation to learn more.







