Skip to content
Legacy docs for Tenzir v5.x. For the latest Tenzir v6 series, visit docs.tenzir.com. Migrating from v5? Read the Tenzir v6 migration guide.

Use Tenzir’s REST API directly from a pipeline.

api endpoint:string, [request_body:string]

The api operator interacts with Tenzir’s REST API without needing to spin up a web server, making all APIs accessible from within pipelines.

The endpoint to request, e.g., /pipeline/list to list all managed pipelines.

Tenzir’s REST API specification lists all available endpoints.

A single string containing the JSON request body to send with the request.

api "/pipeline/list"

Create a new pipeline and start it immediately

Section titled “Create a new pipeline and start it immediately”
api "/pipeline/create", {
name: "Suricata Import",
definition: "from file /tmp/eve.sock read suricata",
autostart: { created: true },
}

Last updated: