Gravwell is an unstructured analytics and log monitoring platform. This is the core system that provides an complete stack, ready for data ingest.
WARNING This is the beta channel, it contains bleeding edge features and may break. DO NOT USE IN PRODUCTION.
See the beta page for more information.
To obtain a free Community Edition license, visit: https://www.gravwell.io/download
For instructions on configuration and deployment see: https://docs.gravwell.io/configuration/docker.html
This container contains the following components which can be individually disabled by setting the appropriate environment variable to TRUE:
| Component | Purpose | Disable Environment variable |
|---|---|---|
| Indexer | Core storage and query system for Gravwell | DISABLE_indexer |
| Webserver | Core webserver and API endpoint for Gravwell | DISABLE_webserver |
| SearchAgent | Provides automated searching and SOAR | DISABLE_searchagent |
| SimpleRelay | Basic ingester suitable for syslog and TCP/UDP data streams | DISABLE_simple_relay |
| Crash Reporter | Error handler that can report faults and crashes for triage and debugging | DISABLE_ERROR_HANDLER |
An Example Invocation using docker that starts the container in daemon mode with a custom ingest secret and disables the simple relay ingester agent is:
docker run -d --name Gravwell
-e DISABLE_simple_relay=TRUE
-e GRAVWELL_INGEST_AUTH=SuperSekritTokens
gravwell/gravwell:latest
Note: The crash reporter helps us catch bugs, if you are using the community tier please consider enabling it so that we can continue to improve Gravwell!
Content type
Image
Digest
sha256:5f8b4f9da…
Size
141.2 MB
Last updated
13 days ago
docker pull gravwell/beta