|
|
Manuals
|
|
|
|
prelude-manager(1) General Commands Manual prelude-manager(1) NAME
prelude-manager - Collects and normalize events. SYNOPSIS
prelude-manager [options] DESCRIPTION
Prelude Manager is a high-availability server which can collect, filter, relay, reverse-relay, normalize and store events. Events can come from registered analyzers and/or managers. The common usage is to store nomalized events into a database, thus this can be extended to store informations in plain text or xml files. OPTIONS
Some prelude-manager option are contextual, they have to be prefixed by another. --prelude Prelude generic options --profile=<name> Profile to use for this analyzer --heartbeat-interval=<interval> Number of seconds between two heartbeat --server-addr=<address> Address where this sensor should report to (addr:port) --analyzer-name=<name> Name for this analyzer --db=<INAME> Options for the libpreludedb plugin -t, --type=<type> Type of database (mysql/pgsql/sqlite3) -l, --log=<file name> Log all queries in a file, should be only used for debugging purpose -h, --host=<address> The host where the database server is running (in case of client/server database) -f, --file=<file name> The file where the database is stored (in case of file based database) -p, --port=<port number> The port where the database server is listening (in case of client/server database) -d, --name=<name> The name of the database where the alerts will be stored -u, --user=<user> User of the database (in case of client/server database) -P, --pass=<password> Password for the user (in case of client/server database) --debug=<INAME> Option for the debug plugin -o, --object=<name> Name of IDMEF object to print (no object provided will print the entire message) -l, --logfile=<file name> Specify output file to use (default to stdout) --relaying=<INAME> Relaying plugin option -p, --parent-managers=<address> List of managers address:port pair where messages should be sent to --textmod=<INAME> Option for the textmod plugin -l, --logfile=<file name> Specify logfile to use --xmlmod=<INAME> Option for the xmlmod plugin -l, --logfile=<file name> Specify output file to use -v, --validate=<xml> Validate IDMEF XML output against DTD -f, --format=<format> Format XML output so that it is readable -d, --disable-buffering=<boolean> Disable output file buffering to prevent truncated tags --idmef-criteria-filter=<INAME> Filter message based on IDMEF criteria -r, --rule=<rule> Filter rule, or filename containing rule --hook=<value> Where the filter should be hooked (reporting|reverse-relaying|plugin name) --config=<file name> Configuration file to use -v, --version Print version number -D, --debug-level=<level> Run in debug mode -d, --daemon Run in daemon mode -P, --pidfile=<file name> Write Prelude PID to pidfile -c, --child-managers=<address> List of managers address:port pair where messages should be gathered from -l, --listen=<address> Address the sensors server should listen on (addr:port) -f, --failover=<boolean> Enable failover for specified report plugin -h, --help Print help FILES
/etc/prelude/prelude-manager.conf - the configuration file BUGS
This man page hadn't been proof-read yet. SEE ALSO
prelude-adduser(1) prelude-manager(1)
