Skip to content
Legacy docs for Tenzir v5.x. For the latest Tenzir v6 series, visit docs.tenzir.com. Migrating from v5? Read the Tenzir v6 migration guide.

Removes entries from a context.

context::erase name:string, key=any

The context::erase operator removes data from a context.

Use the key argument to specify the field in the input that should be deleted from the context.

The name of the context to remove entries from.

The field that represents the enrichment key in the data.

from {network: 10.0.0.1/16}
context::erase "network-classification", key=network

Last updated: