Renderer Modules

Renderer modules are in charge of receiving data from the search module pipeline and organizing it for display to the user. When possible, the renderers provide for a second order temporal index. This allows the user to move around and zero in on time spans within the original search. Renderers can optionally save search results, which can be reopened and viewed or even passed to another instance of Gravwell. This is useful for archiving a view of data or saving the results which survive well after stored data is expired or purposefully deleted.

Every search module has universal enumerated values for records.

• SRC – the source of the data.

• TAG – the Tag attached to the data.

• TIMESTAMP – the timestamp associated with the entry

Renderer Module list

Charts, Graphs, and Gauges

• chart - Render data as line graphs, bar graphs, etc.

• fdg - Force-directed graphs.

• stackgraph - Stack graphs.

• gauge/numbercard - Gauges and numeric cards.

• wordcloud - Word clouds.

Tables and Text

• table - Display tables of enumerated values.

• text - Output the body of entries with minimal formatting.

• raw - Output data completely unformatted.

• pcap - Show an overview of the contents of network packets.

Maps

• pointmap/heatmap - Display heatmaps or individual points on a map.

• point2point - Display data entries which have both a source and a destination.