Output Formats
JSON, JSON stream, NDJSON, CSV, and table output behavior.
json
Indented JSON object. Best for smaller files and integrations that need one complete result document.
It buffers the full result before writing.
json-stream
Streaming JSON object with the same general structure as json, but it encodes events as they are processed.
Use it for lower memory pressure when consumers still expect JSON-like structure. If the process is interrupted, output may be invalid JSON.
ndjson
One tagged JSON event per line.
{"type":"match","data":{}}
{"type":"summary","data":{}}NDJSON is streaming, O(1) for result writing, and crash-safe for already-written lines.
csv
Fixed-schema CSV-style output suitable for spreadsheet inspection or downstream processing.
table
Aligned ASCII table for interactive inspection. It buffers rows and is not intended for large outputs.
Audit support
--audit works with:
jsonjson-streamndjson
It is not supported for csv or table.