Gravel Enterprise Edition Pricing Building Icon

Enterprise Edition

Optimized for Critical Environments and Enterprise SOCs.

STARTING AT

$48k/year

Per indexer and for example estimated usage of 1.2 TB / day might require 4 nodes for $192,000
START A CONVERSATION
ENTERPRISE EDITION Capabilities:
Self hosted on-prem or in your private cloud
Unlimited Kit Installs (Zeek, CoreDNS, Grok, Netflow, Symon and many more)

Unlimited data ingestion

Unlimited ingester endpoints
Unlimited retention
Unlimited search count

Unlimited user seats

Binary data support

Single Sign-on

Tiered storage
Cloud Archive ("Frozen") Storage
Configurable data retention and automatic age-out
Search scheduler agent and built-in orchestration
Scriptable/custom search
Online (“Hot”) replication
Region-aware redundancy
Enhanced Multi-tenancy Permissions
Distributed web frontends
High availability search
Unlimited automations
Role-based access control (RBAC)
Claims-based access control (CBAC)

Let's Talk!

Gravwell Child Pricing Page Comment Question Mark icon

Gravwell Support

At Gravwell our customers’ success is our top priority.

We understand that even our sharpest customer will need a little help, which is why our support model provides the tools, support, and service level agreements needed to succeed. Sometimes customers want a little more, which is why we also offer our professional and premium support packages.
Gravwell Child Pricing Page Robot Hand Clicking on Planet

Severity 1

Severity 2

Severity 3

Severity 4

Knowledge Base, Docs, & Forum

Email Support

Scheduled Phone / 
Video Support

Onboarding 
with UI training

Designated 

Business Account

Technical Training 
Course work

Technical Training 
virtual or on site

Priority Case Routing

Designated Technical

Account Manager

Professional Services

Named Contacts

BASIC
8 Hours Business Hours
2 Days Business Hours
3 Days Business Days
4 Days Business Days
No
Available
No
No
No
No
No
No
0
PROFESIONAL
3 Hour initial response. daily updates. (24/7/365)
12 Hours Business Hours
2 Days Business Hours
3 Days Business Days
Available
No

No

Available
Available
1 Account Manager
PREMIUM
1 Hour initial response. updates every 3 hours. (24/7/365)
8 Hours Business Hours
12 Hours Business Hours
2 Days Business Days
Available
4 hours monthly default, more hours available
Available
1 Account Manager and 1 Technical Expert
Gravwell Pricing Page 23 Update Gravwell FAQ Icon

Frequently Asked Questions

What is a node?

A Gravwell node is an indexer; the Gravwell indexer is responsible for accepting ingested data, indexing it, and storing the data in a storage medium. Webservers, ingesters, and other ancillary components are not counted as nodes for the purpose of licensing.

What is a cluster?

Multiple Gravwell nodes (or Indexers) can be combined to create a single Gravwell Cluster.

What is a webserver?

The webserver acts as the focusing point for all searches and provides an interactive interface into Gravwell.

Do I need multiple webservers?

Most likely, no. Multiple webservers make your cluster more complex. In general, we recommend setting up a single webserver, then adding more only if the load is too high in use.

What is an ingester?

Ingesters gather incoming data, package it into Gravwell entries, and ship it to Gravwell indexers for storage.

What is a dashboard?

Dashboards are aggregated views of searches that provide a view into multiple aspects of the data at once.

What are kits?

Gravwell Kits are pre-packaged tool sets for analyzing a particular data source. Kits exist to analyze Netflow v5, IPFIX, CoreDNS, and more. They're a great way to get started with your data, a jumping-off place to building your own analysis.

What is Community Edition?

Gravwell Community Edition is free for private or commercial usage up to 13.9 GB/day of data ingestion. In addition, our Community actively supports Gravwell on our discord server.

What are the hardware requirements for Gravwell Community Edition?

We strongly recommend at least 4GB of RAM and 2 CPU cores to run Gravwell Community Edition; this should be sufficient up to the CE ingest limit. If you have a paid license, you should scale up your hardware as your daily data ingest increases. In general, we recommend the following rule of thumb:

What are the hardware requirements for Gravwell Pro Edition or Gravwell Enterprise Edition?

You should scale up your hardware as your daily data ingest increases. In general, we recommend the following rule of thumb: One CPU core per 30 GB/day ingest. 1 GB of RAM per 6 GB/day ingest.

Can I import old data?

Yes you can. Check out the migration documents if you have existing data you want to import. https://docs.gravwell.io/#!ingesters/migrate/migrate.md

Are their ingest limits?

Gravwell Community Edition is the ONLY time Gravwell will restrict data ingestion rates. The rate limit is set to 13.9 GB/day of data ingestion, roughly equal to one astronomical unit.

How do I join the Discord Server?

Open invitations are available at: https://discord.com/invite/gravwell

Where do I get support for Gravwell Community Edition?

Join our Discord server and ask any questions you have! https://discord.com/invite/gravwell

How is Gravwell installed?

Gravwell is distributed in four ways: via a Docker container, via a distribution-agnostic self-extracting installer, via a Debian package repository, and via a Redhat package repository.

I have a question that is not listed.

Great! Send us a message, and we will get back to you with an answer. https://www.gravwell.io/contact-us

I want a t-shirt or stickers!

Great! Email marketing@gravwell.io