Gravwell is an enterprise data fusion platform that enables security teams to investigate, collaborate, and analyze data from any source, on demand, all with unlimited data collection and retention. Ingest everything. Investigate anything.
Documentation and a pattern resource file that allows usage of Grok patterns for data extraction within Gravwell.
Greatly simplifies extractions that would otherwise use regular expressions directly.
Topics: