You can use the engine_send tool to stream a sequence of events through the correlator. The engine_send tool accepts input from one or more data files to support tests or simulations, or from stdin to allow dynamic generation of events. In the latter case, you can generate events from user input or by piping output from an event generation program to engine_send. In all cases, engine_send requires event data formatted as described in this section. For detailed information on the engine_send tool, see Sending events to correlators.

The engine_receive tool outputs events in this same file format. This means you can use events generated by the engine_receive tool as input to a second correlator that is executing the engine_send tool. For detailed information on the engine_receive tool, see Receiving events from correlators.