# Overview

> Documentation index: http://docs.tenzir.com/llms.txt

Tenzir offers a layered integration architecture. It ranges from turn-key packages at the top to native protocol connectors at the core.

## Packages

[Packages](http://docs.tenzir.com/explanations/packages.md) are 1-click deployable integrations that deliver instant value. They bundle pipelines, [Enrichment](http://docs.tenzir.com/explanations/enrichment.md), and configurations for common security tools like Splunk, CrowdStrike, Elastic, SentinelOne, Palo Alto, and many more.

Browse our freely available [package library on GitHub](https://github.com/tenzir/library). You can also use [Use agent skills](http://docs.tenzir.com/guides/ai-workbench/use-agent-skills.md) to generate custom packages with AI assistance.

## Core Integrations

Core integrations are native connectors to the ecosystem, enabling communication over numerous protocols and APIs:

* **Cloud storage**: [S3](http://docs.tenzir.com/integrations/amazon/s3.md), [Cloud Storage](http://docs.tenzir.com/integrations/google/cloud-storage.md), [Azure Blob Storage](http://docs.tenzir.com/integrations/microsoft/azure-blob-storage.md)
* **Cloud logging**: [CloudWatch](http://docs.tenzir.com/integrations/amazon/cloudwatch.md), [Cloud Logging](http://docs.tenzir.com/integrations/google/cloud-logging.md)
* **Cloud APIs**: [Graph](http://docs.tenzir.com/integrations/microsoft/graph.md)
* **Message queues**: [Kafka](http://docs.tenzir.com/integrations/kafka.md), [NATS](http://docs.tenzir.com/integrations/nats.md), [SQS](http://docs.tenzir.com/integrations/amazon/sqs.md), [AMQP](http://docs.tenzir.com/integrations/amqp.md)
* **Databases and analytics**: [Snowflake](http://docs.tenzir.com/integrations/snowflake.md), [ClickHouse](http://docs.tenzir.com/integrations/clickhouse.md), [Microsoft SQL Server](http://docs.tenzir.com/integrations/microsoft/sql-server.md), [MySQL](http://docs.tenzir.com/integrations/mysql.md), [Prometheus](http://docs.tenzir.com/integrations/prometheus.md)
* **Network protocols**: [TCP](http://docs.tenzir.com/integrations/tcp.md), [UDP](http://docs.tenzir.com/integrations/udp.md), [HTTP(S)](http://docs.tenzir.com/integrations/http.md), [Syslog](http://docs.tenzir.com/integrations/syslog.md)

Under the hood, core integrations use a C++ plugin abstraction to provide an [operator](http://docs.tenzir.com/reference/operators.md), [function](http://docs.tenzir.com/reference/functions.md), or [context](http://docs.tenzir.com/explanations/enrichment.md) that you can use in TQL to directly interface with the respective resource, such as a TCP socket or cloud storage bucket. We typically implement this functionality using the respective SDK, such as the [AWS SDK](https://aws.amazon.com/sdk-for-cpp/), [Google Cloud SDK](https://cloud.google.com/cpp), or [librdkafka](https://github.com/confluentinc/librdkafka), though some integrations require a custom implementation.

Dedicated operators

For some applications, we provide a **dedicated operator** that dramatically simplifies the user experience. For example, [`to_splunk`](http://docs.tenzir.com/reference/operators/to_splunk.md) and [`accept_opensearch`](http://docs.tenzir.com/reference/operators/accept_opensearch.md) offer a streamlined interface compared to composing generic HTTP or protocol operators.

## Contents

- [Messaging](http://docs.tenzir.com/integrations/amqp.md)
- [Protocols](http://docs.tenzir.com/integrations/file.md)
- [Data Tools](http://docs.tenzir.com/integrations/clickhouse.md)
- [Security Tools](http://docs.tenzir.com/integrations/arcsight.md)