DaveWhat is Gravwell?
It is the most flexible full-stack analytics platform in the world. We excel at fusing disparate data sources such as firewall logs, end point event logs, network traffic, OT IDS logs, OT process data, threat feed data, etc. to create a central source of knowledge. Created in the IoT age we know modern data insights demand unlimited ingest and analysis capability for cybersecurity, IoT, business analytics, and more. We support a wide range of customers, from energy production, energy delivery, government, finance, and insurance to health and beauty products.
Gravwell is a tool in the Log Management category of a tech stack.
Key Features
Ability for deployment in cloud, on-premises, or in an isolated on-premises network lacking outside network connectivityCapable of collecting disparate unstructured time-series data sources into a queryable data lakeEnable data scientists to create custom analysis code/tools to be executed as part of a search pipeline or query systemAnalysts and data scientists have access to raw entry records for retroactive analysis and application of machine learning that did not exist at the time of collectionCapable of data separation and fine-grained access controls for multi-tenancyData collectors or agents are modifiable by the customer to enable processing, filtering, or enrichment before forwarding to the central storeMassive scalability. Over 100 Terabytes a day is no problem.Unlimited data ingestionUnlimited retentionLive DashboardsSecure and ProprietaryOffline ("Cold") and online ("Hot") replicationRegion-aware redundancyMulti-tenancy Permissions & Unlimited user seatsBinary data supportConfigurable data retention and automatic age-outDistributed web frontendsUnlimited search count
Gravwell Pros & Cons
Pros of Gravwell
- ✓Dashboards
- ✓Easy to use GUI
- ✓Great customer support
- ✓Highly scalable and performant
- ✓Indexing on writes
- ✓Ingest native/raw data and query later
- ✓Multi-tenancy
- ✓No storage-based pricing
- ✓Query supports joins on binary data
- ✓Rapid deployment
Cons of Gravwell
- ✗Query language is a lot to learn
Gravwell Alternatives & Comparisons
What are some alternatives to Gravwell?
Logstash
Logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). If you store them in Elasticsearch, you can view and analyze them with Kibana.
Logback
It is intended as a successor to the popular log4j project. It is divided into three modules, logback-core, logback-classic and logback-access. The logback-core module lays the groundwork for the other two modules, logback-classic natively implements the SLF4J API so that you can readily switch back and forth between logback and other logging frameworks and logback-access module integrates with Servlet containers, such as Tomcat and Jetty, to provide HTTP-access log functionality.
SLF4J
It is a simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various logging frameworks allowing the end user to plug in the desired logging framework at deployment time.
