Top all-time · #7916
Gravwell Blog
Company blog · gravwell.io/blogsecuritydata
Gravwell Blog is the company blog at gravwell.io, writing about security and data. Since 2017, 10 different Hacker News readers have linked it 26 times, most often “Discovering truth through lies on the internet–FCC comments analyzed”. It is still writing: the last post was on 2026-10-22, and you can follow it by feed.
Too few sampled comments (12) to say how often HN recommends it.?
Why HN links it
Commenters link Gravwell's site as a Splunk alternative for log and data analytics, noting its free Community Edition and its handling of unstructured data. None comment on the blog writing.
Summarised by Claude from a sample of 12 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Switching from Splunk? Gravwell’s security data platform ingests any log source, uses 40% less compute, and never charges more for more data.
Most-linked posts?
- /2 people · 5 mentions · first linked 2021-02-08
- /blog/gravwell-and-collectd2 people · 3 mentions · first linked 2018-07-10
- Discovering truth through lies on the internet–FCC comments analyzed2 people · 2 mentions · first linked 2017-10-06
- /2 people · 2 mentions · first linked 2019-01-13
What Hacker News says?
Internet-accessble industrial control systems have been a problem for many years now. It's a documented issue but it's difficult to fix for a variety of reasons: 1. Difficult to identify the owner: a lot of the devices are on mobile networks that don't point to an obvious owner. 2. Unknown criticality: is it a demo system or something used in production? 3. Security budget: lots of smaller utilities don't have a bud…
Comment linking /
on “Hacker increased chemical level at Oldsmar's city water system, sheriff says”Submitted Gravwell Community Edition: A Splunk Alternative Built with Go as a story · 115 points
HN discussionWe did some analysis back in 2017 and found some interesting stuff. Highlights: automated comment submission with broken templates so comments were coming from {STATE} and {CITY}, and over a million submissions from @pornhub.com email addresses. Analysis here: https://www.gravwell.io/blog/discovering-truth-through-lies-... (disclaimer: I work for Gravwell)
Comment linking /blog/discovering-truth-through-lies-on-the-internet-fcc-comments-analyzed
on “Opposition to net neutrality was faked, New York says”Submitted Implementing a 0.016 Hz MIPS CPU by abusing Gravwell flows as a story · 4 points
HN discussionI think Gravwell ( https://gravwell.io ) might be what you're looking for--but I work for Gravwell so I may be biased! If I can be forgiven a short sales pitch, we've built a format-agnostic storage & querying system that easily handles raw packets, Netflow records (v5, v9, and IPFIX), collectd data, Windows event logs, and more. You can see some screenshots at https://www.gravwell.io/technology We have a free tier…
Comment linking /blog/gravwell-installed-in-2-minutes
on “Monitoring your own infrastructure using Grafana, InfluxDB, and CollectD”Submitted Gravwell – Log Analysis with Logbot as a story · 2 points
HN discussionGravwell | Go developer | REMOTE (US) | https://www.gravwell.io/ Gravwell is a Splunk competitor, a data aggregation and analysis platform that can ingest hundreds of terabytes a day with ease. Our product is offered both on-prem and as a hosted cloud service. It's written from the ground up in Go, with many open-source components. We're looking for a skilled Go developer who's done more than just REST APIs (althoug…
Comment linking /
on “Ask HN: Who is hiring? (November 2024)”Submitted Discovering truth through lies on the internet–FCC comments analyzed as a story · 2 points
HN discussionGravwell | Go Backend Engineer; Resident Engineer & Systems Support Specialist | Remote (US) & Atlanta, GA | Full-Time | https://gravwell.io Gravwell is a data analytics company with a focus on high-speed analysis of diverse data sources including binary (e.g. PCAP). Our people have extensive backgrounds in penetration testing, reverse engineering, analytics, incident response, and large scale virtualization. Our pl…
Comment linking /careers
on “Ask HN: Who is hiring? (September 2021)”Hey snisarenko, you could use the Gravwell Community Edition which is free up to 2GB/day. 4GB/day if you participate in the current alpha testing program. https://www.gravwell.io/download Disclaimer: I'm one of the founders. We built it to be a Splunk alternative and I think it does a great job from a data ingest, scalability, and data querying perspective. We're lacking some of the out-of-the-box capability, but no…
Comment linking /download
on “Build versus Buy”Love the idea, saw another one in 2018( https://www.gravwell.io/ ) At least in my experience the web interface is a huge gap. Kibana is ok but Splunk and it's query language and visuals are much better. Anything that competes with Splunk is great imo.
Comment linking /
on “Toshi: An Elasticsearch competitor written in Rust”If anybody is looking for an alternative I recommend checking out Gravwell. They use a similar syntax but use an architecture that makes scaling horizontally easier. They also have a free tier that lets you index around 14GB/ day: https://www.gravwell.io/newsroom/gravwell-upgrades-community... Disclaimer: we use them at Shodan and I'm on their board.
Comment linking /newsroom/gravwell-upgrades-community-edition-to-help-users-explore-and-gather-deeper-insights-about-their-data-at-no-additional-cost
on “Logging at Twitter”Speaking of AWS, you may find our Kinesis stream integration useful: https://www.gravwell.io/blog/amazon-kinesis-streams-and-grav...
Comment linking /blog/amazon-kinesis-streams-and-gravwell
on “Gravwell Community Edition: A Splunk Alternative Built with Go”I'll offer up first the caveat that Gravwell is a pretty new product, but we've definitely been building with an eye to extensibility. It helps that we haven't been around long enough to build up too much cruft! The core of Gravwell is the search. You can run searches in the web GUI, or in the CLI client. You can schedule searches to run at certain times (specified with a cron spec, currently) so you could have sear…
Comment linking /blog/gravwell-and-collectd
on “Gravwell Community Edition: A Splunk Alternative Built with Go”Website bug report: when visiting the trial request page[1] the header nav bar ("Home", "FAQ", etc) disappears. [1]: https://www.gravwell.io/local-trial-request
Comment linking /local-trial-request
on “Gravwell Community Edition: A Splunk Alternative Built with Go”Update: We went ahead and pushed out the first of our blog posts on building a home network monitoring center, to give a little more of an idea of what you could use it for: https://www.gravwell.io/blog/gravwell-and-collectd I'm particularly fond of this article because it showcases the Turing-complete scripting interface which I built. The blog post shows how to set up a script which runs on a schedule and emails y…
Comment linking /blog/gravwell-and-collectd
on “Gravwell Community Edition: A Splunk Alternative Built with Go”There's some screenshots in the high-level quickstart ( https://dev.gravwell.io/docs/#!quickstart/quickstart.md ) but in general we do seem to be pretty demo-sparse on the main site. I'd also suggest checking out this older blog post about WiFi analytics ( https://www.gravwell.io/blog/wifi-analytics-wild-west-hackin... ) with the caveat that some things may have been refined a bit since that time. Edit: we're puttin…
Comment linking /blog/wifi-analytics-wild-west-hackin-fest-2017
on “Gravwell Community Edition: A Splunk Alternative Built with Go”It's free as in beer. The source was not made public, and no mention of plans to open source at https://www.gravwell.io/community-edition . This is just a free tier of their product.
Comment linking /community-edition
on “Gravwell Community Edition: A Splunk Alternative Built with Go”I think this post (and the home page) would benefit greatly with some example dashboards and queries. You really have to dig deep into the docs to see what it is capable of. Splunk on the other hand has dashboard examples on almost every page (on their homepage, a carousel with five different examples of the things they purport to solve). (another blog post does a great job with showing off capabilities: https://www…
Comment linking /blog/gravwell-and-collectd
on “Gravwell Community Edition: A Splunk Alternative Built with Go”There's also Gravwell ( https://www.gravwell.io ) that competes head-on with Splunk and doesn't punish you for storing/ indexing more data. I'm on their board and knew the founders before I joined so I'm a bit biased but it's basically what if you wrote Splunk from scratch using modern tech.
Comment linking /
on “Splunk IP suit against Cribl”For logs I'd be more likely to choose https://www.gravwell.io as it's log agnostic and I've seen it crush 40Tb/s a day, whereas it looks like greptime is purpose-tuned for metrics and telemetry data.
Comment linking /
on “Beyond Elk: Lightweight and Scalable Cloud-Native Log Monitoring”Gravwell ( https://www.gravwell.io ) has a community edition that's free to use and runs locally.
Comment linking /
on “Cisco Acquires Splunk”If you're looking for something that can handle unstructured data and has a similar query syntax to Splunk then Gravwell ( https://www.gravwell.io ) might be a fit.
Comment linking /
on “Cisco Acquires Splunk”