Skip to content

Glossary: Logs and Data Sources for Investigations

jq

A command-line tool that reads JSON records and pulls out named fields. -r prints plain text and @tsv makes tab-separated columns.

Where the book teaches it

Related terms

JSON (JavaScript Object Notation)eve.jsonLog parsing