# www.gravwell.io

> AI-optimized mirror of www.gravwell.io containing 51 pages totalling 26,724 words of clean markdown content, structured data, and semantic HTML. Original source: https://www.gravwell.io/. Last updated: 2026-04-27T20:26:59.686Z.

Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG).

## Homepage

- [Security Data   Platform](/site-root.html): Gravwell Home Page (384 words)

## Articles & Blog Posts

- [blog/introducing-autoextractors/index.html](/blog/introducing-autoextractors/index.html) (1 words)
- [Mission   Support](/mission-support/index.html): Mission Support (172 words)
- [blog/relationship-analytics-with-force-directed-graphs/index.html](/blog/relationship-analytics-with-force-directed-graphs/index.html) (1 words)
- [blog/brewing-with-gravwell/index.html](/blog/brewing-with-gravwell/index.html) (1 words)
- [blog/ipmi-and-gravwell-part-2-making-an-ipmi-kit/index.html](/blog/ipmi-and-gravwell-part-2-making-an-ipmi-kit/index.html) (1 words)
- [Gravwell 3.3.0 - Overwatch Release](/blog/gravwell-3-3-0-overwatch-release.html): Announcing Gravwell version 3.3.0 with Overwatch for multi-customer and multi-tenant support. (1,068 words)
- [blog/product-release-update-5-0-0-orion/index.html](/blog/product-release-update-5-0-0-orion/index.html) (1 words)
- [Slice it Like Roast Beef: Parsing Raw ARP Messages in Gravwell](/blog/slice-it-like-roast-beef-parsing-raw-arp-messages-in-gravwell.html): Enriching packet data containing IPv6 neighbor advertisement messages by manually parsing ARP packets to get IPv4 addresses = Gravwell data fusion (1,019 words)
- [Distributed Webserver Frontends in Gravwell](/blog/distributed-webserver-frontends-in-gravwell/index.html): How to instantiate multiple frontend webservers in Gravwell using Docker and the Traefik reverse proxy. (1,232 words)
- [Kit: Palo Alto Networks Next-Generation Firewall](/blog/kit-next-generation-firewall-palo-alto-networks/index.html): Palo Alto's next-gen firewall devices can put out a truly impressive quantity of logs. The logs can be exported to Gravwell via syslog. (768 words)
- [blog/gravwell-and-bro/index.html](/blog/gravwell-and-bro/index.html) (1 words)
- [Announcing the Gravwell Sysmon Kit](/blog/announcing-the-gravwell-sysmon-kit/index.html): Dig into the Gravwell Sysmon kit and investigate Windows System Events (1,346 words)
- [Introducing the Gravwell CoreDNS Kit](/blog/introducing-the-gravwell-coredns-kit/index.html): The Gravwell CoreDNS kit provides dashboards, queries, & more to help you quickly analyze data from a CoreDNS instance using the CoreDNS plugin (1,274 words)
- [Top 5 Questions to Ask when Considering Log Management Solutions](/blog/top-5-questions-to-ask-when-considering-log-management-solutions.html): Questions to ask re: log management solutions - data needs vs budget, search requirements, maintenance, insights to data units, multi-cloud or on-prem  (1,434 words)
- [blog/gravwell-and-windows-event-logging/index.html](/blog/gravwell-and-windows-event-logging/index.html) (1 words)
- [blog/ot-security-analytics-finding-the-ground-truth/index.html](/blog/ot-security-analytics-finding-the-ground-truth/index.html) (1 words)
- [Pricing Designed For Enterprise Ingestion](/pricing/index.html): Pricing Page - Gravwell (320 words)
- [Smarter Gardening with Gravwell](/blog/smarter-gardening-with-gravwell/index.html): Collecting and analyzing IoT sensor data from a hydroponic garden with Gravwell and Arduino (1,304 words)
- [What's in a Sysmon Event - Windows Registry EventIDs 12, 13, 14](/blog/whats-in-a-sysmon-event-windows-registry-eventids-12-13-14.html): Three Sysmon EventIDs come from the Windows Registry when a registry key is created, updated, deleted, or renamed--valuable data from Sysmon for EDR. (1,985 words)
- [Enable Data Fusion & Pivot on Dataset Properties with Enrich Module](/blog/enable-data-fusion-and-pivot-on-dataset-properties-with-the-enrich-module.html): Gravwell's 4.1 release includes the Enrich Module, a powerful tool to add static data to entries, enable data fusion, & pivot on properties of the dataset. (847 words)
- [Amazon Kinesis Streams and Gravwell](/blog/amazon-kinesis-streams-and-gravwell/index.html): Implementation of Gravwell's new Kinesis ingester for use with Amazon's AWS Kinesis Streams system. (846 words)
- [Unveiling Truth: Analyzing FCC Comments Online](/blog/discovering-truth-through-lies-on-the-internet-fcc-comments-analyzed.html): The Gravwell analytics team ingested all 22 million+ comments submitted to the FCC over the net neutrality issue and pulled out some interesting findings. (2,793 words)
- [Newsroom](/newsroom/index.html): Gravwell news, press releases, media coverage, and other industry updates (205 words)
- [Monitoring Vehicle CANBus Activity with Gravwell](/blog/monitoring-vehicle-canbus-activity-with-gravwell/index.html): This post explores using Gravwell to do OT binary protocol analytics and monitor vehicle CANBus activity for fleet management and monitoring. (987 words)
- [Introducing the Key-Value Search Module](/blog/introducing-the-key-value-search-module/index.html): With Gravwell 3.2.4 comes a new module: kv, short for 'key-value, designed to extract kv data from text entries without having to craft nasty regexes. (418 words)
- [Gravwell Resources](/blog/index.html): Gravwell blog with helpful information for threat hunting, big data analytics, and operational intelligence. (215 words)
- [What's in a Sysmon Event Pt. 2 - Network Connections](/blog/sysmon-event-pt-2-network-connections.html): We're building a Gravwell Kit for Sysmon! This is part 2 in a series about development of a kit for the awesome (free) sensor for Windows EDR, Sysmon. (856 words)
- [Mojitos in Miami - S4 or Bust](/blog/mojitos-in-miami-s4-or-bust/index.html): Gravwell is participating in the ICS Detection Challenge at S4x18 as an OT analytics engine. (659 words)
- [Gravwell 3.3.11](/blog/gravwell-3-3-11.html): Announcing versions 3.3.10 and 3.3.11 of Gravwell (803 words)
- [Version 3.2.3 - Performance Improvements](/blog/version-3-2-3-performance-improvements.html): Version 3.2.3 released with big performance improvements to the fulltext indexing system. (937 words)
- [How to move to Gravwell from Splunk (or another platform)](/blog/how-to-move-to-gravwell-from-splunk/index.html): Migrating from Splunk doesn't have to happen all at once. Read about the strategy to improve observability and reduce costs. (565 words)
- [Monitoring HomeLab and Network with Gravwell Community Edition](/blog/monitoring-homelab-and-network-with-gravwell-community-edition.html): CE user shares how he utilizes Community Edition to monitor home lab and home network (640 words)
- [Gravwell Seeks to Shake Up the SIEM Market](/newsroom/risky-biz-gravwell-seeks-to-shake-up-the-siem-market.html): Podcast interview from Risky Business - Gravwell Seeks to Shake Up the SIEM Market, Risky.biz, Snake Oilers 12 part 2 (522 words)
- [Security Data Lake-Get started with Gravwell](/blog/security-data-lake/index.html): Security Data Lake (45 words)
- [Bots Flood FCC: Anti-Net Neutrality Comments Persist](/newsroom/daily-dot-bots-are-flooding-the-fccs-website-with-anti-net-neutrality-comments.html): Original article from daily dot - Bots are flooding the FCC’s website with anti-net neutrality comments (281 words)
- [Home Assistant Integration: Analyzing Smart Homes with Gravwell](/blog/integrating-home-assistant-with-gravwell-for-smart-home-analysis.html): Explore the journey of Home Assistant data into Gravwell, enabling long-term analysis and control of smart devices from an innovative dashboard. (438 words)
- [Techando Episode 169: Gravwell's Corey Thuen](/newsroom/itprotv-techando-episode-169-gravwells-corey-thuen/index.html): Video interview from ITProTV - Gravwell's Corey Thuen on Technado episode 169 (287 words)
- [Splunk Integrations for Gravwell](/blog/splunk-integrations-for-gravwell/index.html): New Splunk integrations for Gravwell, including a Splunk Query flow node and a tool to migrate data from Splunk to Gravwell (529 words)
- [Gravwell Story: Why?](/blog/gravwell-story-why/index.html): Gravwell Story: What & Why? (45 words)
- [Gravwell Resources](/videos/index.html): Resource Videos (174 words)
- [Announcing the Sysmon kit from Gravwell](/blog/announcing-the-sysmon-kit-from-gravwell/index.html): Video: See how Gravwell’s Sysmon Kit can help you monitor data, threat hunt applications, and fight malware. 

 (136 words)
- [Meet with Dan Wheatley](/futurecon-dandd/index.html) (56 words)
- [Fill Gaps In Data With Enrich](/blog/fill-gaps-in-data-with-enrich/index.html): Sometimes data has gaps that make processing difficult. Enrich allows you to fill in any missing fields with a constant value. (124 words)
- [Unlimited Data Fusion Platform with Clear-Cut Pricing](/blog/screw-zone-pricing/index.html): Do you have enough data to need a serious tool? And you are finding that the main tools' data caps push you to the enterprise tier pricing? We're the only truly unlimited data fusion platform for serious data crunching needs. (158 words)
- [Build a Career   You Love](/careers/index.html): About Page - Gravwell (277 words)
- [Squirrel Sightings in Central Park, NY, NY](/blog/squirrel-sightings-in-central-park-ny-ny/index.html): This query utilizes data from the NYC OpenData project to map out squirrel sightings in Central Park, NY, NY.  (103 words)
- [Thank you for requesting a demo!](/thank-you-request-a-demo/index.html) (33 words)
- [Request a Demo](/request-a-demo/index.html): Request a Gravwell demo to ingest any data type in raw form, search fast with schema-on-read, and scale with predictable, infrastructure-based pricing. (271 words)
- [harness   Gravwell   for free!](/community-edition/index.html): Community Edition (149 words)
- [Become A Partner](/partner-registration/index.html) (11 words)

## Resources

- [Full Page Index](/index.html): Browse all cached pages with rich metadata
- [About This Cache](/content/about.html): Methodology, technical details, and usage guidelines
- [XML Sitemap](/content/sitemap.xml): Machine-readable sitemap for crawler discovery
- [Robots.txt](/content/robots.txt): Crawler directives