This repository hosts the official collection of content packages for Tenzir.
Pick the workflow that fits your environment. For details, see our installation guide:
- Web UI: browse to app.tenzir.com/library and click Install.
- Interactive: run
package_addagainst a local directory, and remove it later withpackage_remove. - As code: place packages under
packages/inside your configuration directory (or another path listed intenzir.package-dirs) and include an optionalconfig.yamlfor inputs.
A package lives in a directory with these building blocks:
operators/: user-defined operators (UDOs) you can reuse across pipelines.examples/: runnable TQL snippets that demonstrate package UDOs.tests/: deterministic integration tests that verify UDOs.package.yaml: the package manifest with metadata and optional enrichment contexts.
Join us on our mission to democratize the world of security data integrations. Follow our tutorials to learn how to package up use cases. Then:
- Share it on the Community Discord to gather feedback.
- Open a pull request in github.com/tenzir/library so the package appears in the public Tenzir Library.
- Keep iterating—tests and good docs make it easier for others to adopt your work.