Decompresses a stream of bytes in the Bzip2 format.
decompress_bz2Description
Section titled “Description”The decompress_bz2 operator decompresses bytes in a pipeline incrementally.
The operator supports decompressing multiple concatenated streams
of the same codec transparently.
Examples
Section titled “Examples”Import Suricata events from a Bzip2-compressed file
Section titled “Import Suricata events from a Bzip2-compressed file”from_file "eve.json.bz" { decompress_bz2 read_suricata}import