Kits

Gravwell ships with ready-to-install kits that you may install in a matter of minutes to monitor and secure your infrastructure. Interested in learning more about these, or new kits currently in development? Schedule a Demo and one of our Gravwell Guides will walk you through our powerful data analytics platform.

CoreDNS

This kit provides ready-to-roll dashboards, queries, templates, playbooks, and actionables.

The CoreDNS kit depends on the Gravwell CoreDNS Plugin.

Netflow

This kit provides ready-to-roll dashboards, queries, templates, playbooks, and actionables.

The Netflow v5 kit depends on the Gravwell Netflow Ingester and makes heavy use of the netflow search module.

Network Data Fusion

This kit provides resources which can be used to enrich network data.

Grok

The Grok kit provides some documentation and a pattern resource file to allow usage of Grok patterns for data extraction within Gravwell. This greatly simplifies extractions that would otherwise use regular expressions directly.

IPFIX

This kit provides ready-to-roll dashboards, queries, templates, playbooks, and actionables for working with IPFIX data.

The IPFIX kit depends on the Gravwell Netflow Ingester and makes heavy use of the ipfix search module.

Bandura Cyber

The Bandura Cyber kit provides a standard Gravwell configuration for use alongside the  TI Firewall's powerful syslog export features.

Weather

A learning kit that gathers current weather conditions for a list of locations, which can be viewed using the included dashboard.

Zeek

The Zeek Kit provides a baseline set of queries, dashboards, templates, and investigative resources for the Zeek Network Security Monitor.