Skip to content

Decompresses a stream of bytes in the Brotli format.

decompress_brotli

The decompress_brotli operator decompresses bytes in a pipeline incrementally. The operator supports decompressing multiple concatenated streams of the same codec transparently.

Import Suricata events from a Brotli-compressed file

Section titled “Import Suricata events from a Brotli-compressed file”
from_file "eve.json.brotli" {
decompress_brotli
read_suricata
}
import

Last updated: