Skip to main content
Version: v4.27

print

Prints the specified record field as a string.

Synopsis​

print <input> <printer> [<args...>]

Description​

The print operator prints a given <input> field of type record using <printer> and replaces this field with the result.

<input>​

Specifies the field of interest. The field must be a record type.

<printer> [<args...>]​

Specifies the printer format and the corresponding arguments specific to each printer.

Text-based and Binary Formats

The print operator is currently restricted to text-based formats like JSON or CSV. Binary formats like PCAP or Parquet are not supported.

Examples​

Print JSON from the flow field in the input as CSV.

print flow csv --no-header
Input
{
  "timestamp": "2021-11-17T13:32:43.237882",
  "flow_id": 852833247340038,
  "flow": {
    "pkts_toserver": 1,
    "pkts_toclient": 0,
    "bytes_toserver": 54,
    "bytes_toclient": 0,
 }
}
Output
{
  "timestamp": "2021-11-17T13:32:43.237882",
  "flow_id": 852833247340038,
  "flow": "1,0,54,0",
}