diff options
| -rw-r--r-- | README.md | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -13,12 +13,12 @@ Options: -v, --verbose Make the output more verbose (print abridged logs for all logins where commands are run, not just the interesting ones) -vv, --verboser Make the output even more verbose (print timestamp, event id, and message (if applicable) for all events) -vvv, --verbosest Make the output even more verboserer (just group the input log by session id and dump it to pretty-printed JSON) --B, --blank On default and low verbosity, print nothing whatsoever. Override this with other arguments to filter for only the stuff you care about +-B, --blank Print nothing whatsoever. Override this with other arguments to filter for only the stuff you care about -P, --pings | With blank mode active, print "empty pings" -F, --fails | With blank mode active, print failed logins -L, --logins | With blank mode active, print "login pings" --C, --commands | With blank mode active, on default verbosity, print "command pings" --S, --sessions * With blank mode active, on default verbosity, print "interesting" sessions. With -v enabled, this and -C do the same thing. +-C, --commands | With blank mode active, print "command pings" +-S, --sessions * With blank mode active, print the cool interesting sessions that aren't any of that other stuff. -i, --filter-ip FILTER_IP Filter data to a specific IP ``` |