Decompresses a stream of bytes in the Lz4 format.
decompress_lz4Description
Section titled “Description”The decompress_lz4 operator decompresses bytes in a pipeline incrementally.
The operator supports decompressing multiple concatenated streams
of the same codec transparently.
Examples
Section titled “Examples”Import Suricata events from a LZ4-compressed file
Section titled “Import Suricata events from a LZ4-compressed file”from_file "eve.json.lz4" { decompress_lz4 read_suricata}import