twlogeye CLI Command Map

twlogeye

Global Flags

• –config
• –apiPort (-p)
• –apiServer
• –serverCert
• –clientCert
• –serverKey
• –clientKey
• –caCert

  clear

• logs
• notify
• report

  dashboard ...

• monitor
• anomaly
• syslog
  • count
  • pattern
  • error
• trap
  • count
  • type
• netflow
  • count
  • ip.packet
  • ip.byte
  • mac.packet
  • mac.byte
  • flow.packet
  • flow.byte
  • fumble
  • prot
  • host
  • loc
  • country
• winevent
  • count
  • pattern
  • error
• otel
  • count
  • pattern
  • error
  • metric.
• mqtt
  • count
  • type
• Flags
  • –history
  • –topn

    gencert

• Flags
  • –cn

    log

• Flags:
  • –logtype
  • –start
  • –end
  • –search

    mcp

    notify

• Flags:
  • –level
  • –start
  • –end

    otel <metric|trace> <list|id>

    reload

    report []

• syslog
• trap
• netflow
• winevent
• otel
• mqtt
• anomaly
• monitor
• last
  • syslog
  • trap
  • netflow
  • winevent
  • otel
  • mqtt
  • monitor
  • anomaly
• Flags:
  • –start
  • –end
  • –noList

    sigma

• list (default)
• packs
• stat
• logsrc
• field
• check
• test
• convert-wazuh
  • Flags:
    • –output (-o)
    • –min-level
    • –skip-frequency
    • –stdout
    • –service
    • –product
• convert-wazuh-decoder
  • Flags:
    • –output (-o)
    • –stdout
• Flags:
  • –sigmaRules
  • –sigmaPacks
  • –pack
  • –custom

    start

• Flags:
  • –dbPath (-d)
  • –logPath (-l)
  • –parquetBufferSize
  • –parquetBufferTime
  • –syslogUDPPort
  • –syslogTCPPort
  • –netflowPort
  • –trapPort
  • –mibPath
  • –logRetention
  • –logRetentionDays
  • –notifyRetention
  • –reportRetention
  • –reportTopN
  • –anomalyNotifyDelay
  • –anomalyReportThreshold
  • –anomalyAlgo
  • –reportInterval
  • –syslogDst
  • –trapDst
  • –webhookDst
  • –mcpEndpoint
  • –mcpFrom
  • –mcpToken
  • –trapCommunity
  • –sigmaRules
  • –sigmaPacks
  • –sigmaConfigs
  • –namedCaptures
  • –grokDef
  • –grokPat
  • –winEventLogChannel
  • –winEventLogCheckInterval (-i)
  • –winEventLogCheckStart (-s)
  • –winUser
  • –winPassword
  • –winAuth
  • –keyValParse
  • –sigmaSkipError
  • –debug
  • –sjis
  • –anomalyUseTime
  • –otelHTTPPort
  • –otelgRPCPort
  • –otelFrom
  • –otelCert
  • –otelKey
  • –otelCA
  • –otelRetention
  • –mqttTCPPort
  • –mqttWSPort
  • –mqttFrom
  • –mqttUsers
  • –mqttCert
  • –mqttKey
  • –geoIPDB
  • –resolveHostName

    stop

    service (Windows only)

• install
  • Flags:
    • –name
    • –displayName
    • –description
    • –config
    • –autoStart
• remove
  • Flags:
    • –name
• start
  • Flags:
    • –name
• stop
  • Flags:
    • –name
• status
  • Flags:
    • –name

      version

• Flags:
  • –color

    watch