This repository hosts the official collection of content packages for Tenzir.
Pick the workflow that fits your environment. For details, see our installation guide:
- Web UI: browse to app.tenzir.com/library and click Install.
- Interactive: run
package::addagainst a local directory, and remove it later withpackage::remove. - As code: place packages under
packages/inside your configuration directory (or another path listed intenzir.package-dirs) and include an optionalconfig.yamlfor inputs.
A package lives in a directory with these building blocks:
operators/: user-defined operators (UDOs) you can reuse across pipelines.examples/: runnable TQL snippets that demonstrate package UDOs.tests/: deterministic integration tests that verify UDOs.package.yaml: the package manifest with metadata and optional enrichment contexts.
Join us on our mission to democratize the world of security data integrations.
Follow the write-a-package tutorial to scaffold, test, and document a new idea, then:
- Share it on the Community Discord to gather feedback.
- Open a pull request in github.com/tenzir/library so the package appears in the public Tenzir Library.
- Keep iterating—tests and good docs make it easier for others to adopt your work.