{"slug": "gravwell-adds-ai-agents-to-platform-for-automating-it-and-security-operations", "title": "Gravwell Adds AI Agents to Platform for Automating IT and Security Operations", "summary": "Gravwell released version 5.10 of its open-source analytics and automation platform, adding five AI agents for IT operations and cybersecurity teams: a read-only Case Agent, an Alert Triage Agent, an Admin Agent, a Daily Summary Agent, and an Audit Agent. David Fritz, vice president of research for Gravwell, said the agents are environment-aware and governed by defined tools, permissions, and Model Context Protocol (MCP) server access, with workflow visualizations showing how each agent reached its conclusions. The AI Agent Preview kit is available across all Gravwell editions, including Community Edition, and Gravwell positions the platform as an open-source alternative to Splunk, owned by Cisco, aimed at reducing the total cost of IT and cybersecurity operations.", "body_md": "TL;DR — Key Takeaways\n\n- **Gravwell 5.10 introduces five AI agents** for security and IT operations, covering case investigation, alert triage, administration, daily telemetry summaries and audit checks.\n- **The agents are environment-aware and tightly governed** , with defined tools, permissions and MCP access, plus workflow visualizations showing how each agent reached its conclusions.\n- **Gravwell wants teams to manage automated workflows rather than execute every task manually** , using natural language to define intent while keeping human review over AI-generated actions and automations.\n\nGravwell this week revealed it has added five artificial intelligence (AI) agents to its open-source analytics and automation platform for IT operations and cybersecurity teams.\n\nDavid Fritz, vice president of research for Gravwell, said [version 5.10 of the company’s namesake platform](https://www.prnewswire.com/news-releases/gravwell-5-10-introduces-environment-aware-ai-agents-for-security-operations-302872510.html) provides those teams with a set of AI agents that, via tighter integration with the underlying platform, have the necessary context required to successfully automate a range of workflows.\n\nThose AI agents include a read-only Case Agent that can write and validate Gravwell queries, run them, interpret the results and recommend the next event to investigate and an Alert Triage Agent to review alerts, run supporting queries, collect relevant context and prepare an initial investigation report.\n\nThere is also an Admin Agent that surfaces insights into the configuration of a Gravwell deployment, a Daily Summary Agent that runs nightly reviews of telemetry data to surface issues that warrant further investigation and, finally, an Audit Agent that conducts read-only health and hygiene assessment across automations, alerts, query content, infrastructure, and data flows to identify, for example, stalled searches or storage issues.\n\nEach agent is made available as part of an AI Agent Preview kit, which provides prebuilt agents with defined tools, permissions, and workflows. Each agent specification defines which tools and portions of a Model Context Protocol (MCP) server they are allowed to access. Gravwell 5.10 also includes visualization of agent workflows that highlight how an AI agent collected information, applied its instructions, interacted with tools, and progressed to an outcome. The AI Agent Preview kit is available across Gravwell editions, including Community Edition, rather than being restricted to a separate premium tier.\n\nThe overall goal is to make it possible for IT and cybersecurity teams to become managers of automated workflows rather than having to perform each individual task manually themselves, said Fritz. The AI agents for all intents and purposes become an extension of those teams that can, for example, triage an alert at 2:00 AM to reduce toil and stress, he added.\n\nThe Gravwell platform provides an open-source alternative to rival offerings from the Splunk arm of Cisco that IT and cybersecurity teams can employ to reduce the total cost of IT and cybersecurity operations, noted Fritz. The AI agents developed by Gravwell are the first in a series of extensions that will add an agentic AI framework and harness that will enable IT and cybersecurity teams to create highly customizable workflows, he added.\n\nThat level of integration is critical because it provides AI agents with the context needed to automate workflows in a way that is not as achievable using general-purpose AI coding tools and models, said Fritz.\n\nHopefully, AI agents will soon make it possible to automate a wide range of tasks that previously would have required significant amounts of coding expertise. In the AI era, the actual programming language used to create specific automations has become less relevant. Instead, IT operations and cybersecurity teams are able to use natural language to express an intent that they can review before applying. The challenge, of course, is that rather than simply cutting and pasting code, it’s essential that IT and cybersecurity teams make sure the output provided by the AI coding tool actually works as intended.", "url": "https://wpnews.pro/news/gravwell-adds-ai-agents-to-platform-for-automating-it-and-security-operations", "canonical_source": "https://techstrong.it/features/gravwell-adds-ai-agents-to-platform-for-automating-it-and-security-operations/", "published_at": "2026-09-11 11:40:54+00:00", "updated_at": "2026-09-11 14:16:50.628656+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents", "ai-products", "ai-tools"], "entities": ["Gravwell", "David Fritz", "Gravwell 5.10", "Case Agent", "Alert Triage Agent", "Admin Agent", "Daily Summary Agent", "Audit Agent"], "alternates": {"html": "https://wpnews.pro/news/gravwell-adds-ai-agents-to-platform-for-automating-it-and-security-operations", "markdown": "https://wpnews.pro/news/gravwell-adds-ai-agents-to-platform-for-automating-it-and-security-operations.md", "text": "https://wpnews.pro/news/gravwell-adds-ai-agents-to-platform-for-automating-it-and-security-operations.txt", "jsonld": "https://wpnews.pro/news/gravwell-adds-ai-agents-to-platform-for-automating-it-and-security-operations.jsonld"}}