Skip to main content
Version: Tenzir v4.6


A format is the bridge between raw bytes and structured data. A format provides a parser and/or printer:

  1. Parser: translates raw bytes into structured event data
  2. Printer: translates structured events into raw bytes

Parsers and printers interact with their corresponding dual from a connector:

Formats appear as an argument to the read and write operators:

read <format>
write <format>

from <connector> [read <format>]
to <connector> [write <format>]

Tenzir ships with the following formats: