Skip to content

Output Options

Control how and where output is printed.

CLI Options

CLI Option Description
[format:]{table,table-verbose,json,gob,gotemplate=/path/to/template} output events in the specified format. for gotemplate, specify the mandatory template file
out-file:/path/to/file write the output to a specified file. the path to the file will be created if not existing and the file will be deleted if existing (deafult: stdout)
err-file:/path/to/file write the errors to a specified file. the path to the file will be created if not existing and the file will be deleted if existing (deafult: stderr)
option:{stack-addresses,detect-syscall,exec-env} augment output according to given options (default: none)
stack-addresses include stack memory addresses for each event
detect-syscall when tracing kernel functions which are not syscalls, detect and show the original syscall that called that function
exec-env when tracing execve/execveat, show the environment variables that were used for execution

(Use this flag multiple times to choose multiple capture options)

Examples

output as json

--output json

output as the provided go template

--output gotemplate=/path/to/my.tmpl

output to /my/out and errors to /my/err

--output out-file:/my/out err-file:/my/err