Decompresses a stream of bytes in the Gzip format.
decompress_gzipDescription
Section titled “Description”The decompress_gzip operator decompresses bytes in a pipeline incrementally.
The operator supports decompressing multiple concatenated streams
of the same codec transparently.
Examples
Section titled “Examples”Import Suricata events from a Gzip-compressed file
Section titled “Import Suricata events from a Gzip-compressed file”load_file "eve.json.gz"decompress_gzipread_suricataimport