Skip to main content
Version: Tenzir v4.5

export

Retrieves events from a Tenzir node. The dual to import.

Synopsis

export [--live]

Description

The export operator retrieves events from a Tenzir node.

--live

Work on all events that are imported with import operators in real-time instead of on events persisted at a Tenzir node.

Examples

Expose all persisted events as JSON data.

export | to stdout

Apply a filter to all persisted events, then only expose the first ten results.

export | where 1.2.3.4 | head 10 | to stdout