Skip to main content
Version: v4.13


Manages a context.


context create  <name> <type> [<args>]
context delete <name>
context update <name> [<args>]
context reset <name>
context save <name>
context load <name>
context inspect <name>


The context operator manages context instances.

  • The create command creates a new context with a unique name.

  • The delete command destroys a given context.

  • The update command adds new data to a given context.

  • The reset command clears the state of a given context, as if it had just been created.

  • The save command outputs the state of the context, serialized into bytes. The result can be processed further in a pipeline, e.g. as an input for the save operator, or to initialize another context with context load.

  • The load command takes in bytes, likely previously created with context save, and initializes the context with that data.

  • The inspect command dumps a specific context's user-provided data, usually the context's content.


The name of the context to create, update, or delete.


The context type for the new context.

See the list of available context types.


Context-specific options in the format --key value or --flag.


Create a lookup table context called feodo:

context create feodo lookup-table

Update the context feodo with data from the Feodo Tracker IP Block List, using the ip_address field as the lookup table key:

from read json
| context update feodo --key=ip_address

Clear all previous data in the context feodo:

context reset feodo

Delete the context named feodo:

context delete feodo

Inspect all data provided to feodo:

context inspect feodo