Key-value (KV) stores provide methods for retrieving and storing data within and outside of the system. KV stores can be local or remote, read-only or read-write, and extended by adding new storage backends.

KV stores are used to implement several use cases (and many more we haven't thought of yet), including:

local or remote data caching
cross- and intra-dataset field correlation
external enrichment from CSV, JSON, MMDB or text files
indicator matching

KV Store Actions

Each KV store is unique and defines its own settings, but there are common actions shared across all stores:

get: retrieves a value from the store
set: puts a value into the store
set with ttl: puts a value into the store with a time-to-live