Skip to content

local

Forces a pipeline to run locally.

local { … }

The local operator takes a pipeline as an argument and forces it to run at a client process.

This operator has no effect when running a pipeline through the API or Tenzir Platform.

export
where @name.starts_with("suricata")
local {
sort timestamp
}
write_ndjson
save_file "eve.json"

remote