Skip to main content
Version: Tenzir v4.9

export

Retrieves events from a Tenzir node. The dual to import.

Synopsis

export [--live] [--internal] [--low-priority]

Description

The export operator retrieves events from a Tenzir node.

--live

Work on all events that are imported with import operators in real-time instead of on events persisted at a Tenzir node.

--internal

Export internal events, such as metrics or diagnostics, instead. By default, export only returns events that were previously imported with import. In contrast, export --internal exports internal events such as operator metrics.

--low-priority

Treat this export with a lower priority, causing it to interfere less with regular priority exports at the cost of potentially running slower.

Examples

Expose all persisted events as JSON data.

export | to stdout

Apply a filter to all persisted events, then only expose the first ten results.

export | where 1.2.3.4 | head 10 | to stdout