Loading...

Security data pipeline platform with a query language for log normalization and
Security data pipeline platform with a query language for log normalization and
Tenzir TQL (Tenzir Query Language) is a pipeline-based security data processing language and platform developed by Tenzir. It provides a concise, expressive syntax for building data pipelines that handle log normalization, threat intelligence enrichment, and security workflow automation. The platform centers on TQL, which enables structured and unstructured data processing within a single pipeline engine, replacing multiple ETL, parsing, and enrichment tools. The Tenzir Platform manages a fleet of Tenzir Nodes and includes several components: Pipeline Management for starting, stopping, pausing, and monitoring pipelines with activity charts and diagnostics; a Data Explorer for managing context objects such as lookup tables, Bloom filters, and GeoIP databases, capable of ingesting billions of indicators and enriching at 100k+ events per second; Enrichment Contexts for collecting and shaping data, including OCSF mapping and split-routing to SIEM and data lakes; Native Dashboards for visualizing data streams as line, bar, pie, or area charts; and a Package Library of reusable pipeline packages deployable with a single click. TQL supports mapping data to the Open Cybersecurity Schema Framework (OCSF), enriching events with threat intelligence, and routing data to downstream security tools. The platform claims 30–50% reduction in data processing costs, 40% improvement in team efficiency, and elimination of tool sprawl across ETL and enrichment tooling. A free Community Edition is available alongside commercial offerings.
Common questions about Tenzir TQL including features, pricing, alternatives, and user reviews.
Tenzir TQL is Security data pipeline platform with a query language for log normalization and, developed by Tenzir. It is a Security Operations solution designed to help security teams with Log Management.
Unified observability platform deployed in customer cloud infrastructure
Distributed search and analytics engine for real-time data storage and retrieval
Data ingestion platform for collecting logs, metrics, traces from multiple sources
Search AI platform with vector database for logs, threat hunting, and AI apps