save | Tenzir

Skip to main content

Docs Blog Changelog

v4.23

Next
v4.24
v4.23
v4.22
v4.21

Overview
FAQs
Tutorials
Quickstart
Map Data to OCSF
Write a Package
Guides
Installation
Usage
Integrations
Contribution
Development
Troubleshooting
TQL2 Migration
Reference
Language
Operators
- api
- assert
- batch
- buffer
- cache
- compress
- config
- decompress
- delay
- diagnostics
- discard
- drop
- enumerate
- every
- export
- fields
- files
- fluentbit
- fork
- from
- from_velociraptor
- head
- import
- legacy
- load
- load_balance
- load_file
- load_google_cloud_pubsub
- load_http
- load_kafka
- load_tcp
- measure
- metrics
- nics
- openapi
- partitions
- pass
- plugins
- processes
- publish
- python
- rare
- read_bitz
- read_cef
- read_csv
- read_gelf
- read_grok
- read_json
- read_kv
- read_leef
- read_lines
- read_ndjson
- read_ssv
- read_suricata
- read_syslog
- read_tsv
- read_xsv
- read_yaml
- read_zeek_json
- read_zeek_tsv
- repeat
- reverse
- sample
- save
- save_file
- save_google_cloud_pubsub
- save_http
- save_kafka
- schemas
- select
- serve
- set
- shell
- sigma
- slice
- sockets
- sort
- subscribe
- summarize
- tail
- taste
- throttle
- timeshift
- to_azure_log_analytics
- to_hive
- to_splunk
- top
- version
- where
- write_bitz
- write_json
- yara
Functions
Configuration
REST API
Python Library
Platform CLI
Glossary
Explanations
How Tenzir Works
Pipelines
Packages
Use Cases
Architecture
Deprecated Reference
Language
Operators
Connectors
Formats
Contexts
Data Model

This is documentation for Tenzir v4.23, which is no longer actively maintained.

For up-to-date documentation, see the latest version (v4.24).

Operators
save

Version: v4.23
save
Edit this page

Previous
sample
Next
save_file

Resources

Docs
API
Blog
Changelog
Release Notes

Community

Discord
GitHub
Twitter
LinkedIn

Tenzir

Website
Newsletter
Privacy Statement
Tenzir vs. Cribl