Grav.y 101: The Anatomy of a Gravwell Query
Sept 29, 2026 | 11 A.M. PT | 30 Minute Webinar
Stop simply copying queries from colleagues and learn to write your own. Grav.y, Gravwell’s query language, is a powerful, expressive, pipeline-delimited language that lets you ask almost any question of your data. Understanding how those pipelines work is key to unlocking its full potential. This session covers the fundamentals of Grav.y, guiding you through progressively more capable queries against real data.
What We'll Cover
- Building simple tag filters to return raw entries
- Adding extraction modules to pull structured fields from JSON, syslog, and unstructured text
- Working with enumerated values to carry data forward through the pipeline
- Applying processing modules to count and summarize your results
- Changing renderers to seamlessly convert queries into tables or dashboard-ready charts
- Using Logbot to build and validate queries
What You Will Take Away
- A working mental model of the search pipeline
- A toolkit of reusable query patterns applicable to your own environment
- The ability to confidently read and modify queries written by others
- Insights on your own data during the reserved Q&A session at the end
Mike Wade
VP, Customer Success at Gravwell
Mike leads customer success at Gravwell, helping enterprise scale organizations conquer their log and data management challenges. He specializes in empowering Security and IT professionals with the tools they need to achieve powerful threat hunting and deep incident investigation.