Skip to main content
Version: Tenzir v4.5


A format is the bridge between raw bytes and structured data. A format provides a parser and/or printer:

  1. Parser: translates raw bytes into structured event data
  2. Printer: translates structured events into raw bytes

Parsers and printers interact with their corresponding dual from a connector:

Formats appear as an argument to the read and write operators:

read <format> [from <connector>]
write <format> [to <connector>]

If the connector is omitted, the default is stdin or stdout.

Tenzir ships with the following formats: