Decisions#
List active decisions#
Filter decisions by IP#
cscli decisions list --ip <ip>
Ban an IP manually#
cscli decisions add --ip <ip> --duration <duration> --reason "<reason>"
Ban an IP range#
cscli decisions add --range <ip-range> --duration <duration> --reason "<reason>"
Remove a ban for an IP#
cscli decisions delete --ip <ip>
Delete all decisions#
cscli decisions delete --all
Alerts#
List all alerts#
Inspect alert details#
cscli alerts inspect <id>
Filter alerts by IP#
cscli alerts list --ip <ip>
Delete all alerts#
cscli alerts delete --all
Bouncers#
List all bouncers#
Add a bouncer#
cscli bouncers add <bouncer-name>
Remove a bouncer#
cscli bouncers delete <bouncer-name>
Collections & Scenarios#
List installed collections#
Install a collection#
cscli collections install crowdsecurity/nginx
Remove a collection#
cscli collections remove crowdsecurity/nginx
Upgrade all collections#
cscli hub update && cscli collections upgrade --all
List installed scenarios#
Install a scenario#
cscli scenarios install crowdsecurity/ssh-bf
Parsers#
List installed parsers#
Install a parser#
cscli parsers install crowdsecurity/sshd-logs
Hub#
Update hub index#
Upgrade all installed items#
Show hub status#
Metrics & Logs#
Show metrics#
Show live logs#
Follow CrowdSec log directly#
tail -f /var/log/crowdsec.log
LAPI (Local API)#
Check LAPI status#
Register a machine#
cscli machines add --auto
List all machines#
Remove a machine#
cscli machines delete <hostname>