file_tshark_export
Export packet data into structured formats (fields, JSON, EK) for analysis. Use when you need parsed data instead of raw pcap files.
Instructions
Export packet data in structured format (fields, json, or ek). For writing filtered pcap files, use file_write_filtered_capture instead.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| fields | No | ||
| format | Yes | ||
| decode_as | No | ||
| input_file | Yes | ||
| max_packets | No | ||
| output_mode | No | auto | |
| read_filter | No | ||
| display_filter | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |