1prelude-manager(1)          General Commands Manual         prelude-manager(1)
2
3
4

NAME

6       prelude-manager - Collects and normalize events.
7

SYNOPSIS

9       prelude-manager [options]
10

DESCRIPTION

12       Prelude  Manager  is a high-availability server which can collect, fil‐
13       ter, normalize and store events. Events can come from  registered  ana‐
14       lyzers  and/or  managers. The common usage is to store nomalized events
15       into a database, thus this can be extended  to  store  informations  in
16       plain text or xml files.
17
18

OPTIONS

20       Some prelude-manager option are contextual, they have to be prefixed by
21       another.
22
23       --prelude Prelude generic options
24
25       --profile=<name> Profile to use for this analyzer
26
27       --heartbeat-interval=<interval> Number of seconds between two heartbeat
28
29       --server-addr=<address> Address where  this  sensor  should  report  to
30       (addr:port)
31
32       --analyzer-name=<name> Name for this analyzer
33
34
35       --db=<INAME>
36            Options for the libpreludedb plugin
37
38            -t, --type=<type> Type of database (mysql/pgsql/sqlite3)
39
40            -l,  --log=<file  name>  Log all queries in a file, should be only
41            used for debugging purpose
42
43            -h, --host=<address> The host where the database server is running
44            (in case of client/server database)
45
46            -f,  --file=<file  name> The file where the database is stored (in
47            case of file based database)
48
49            -p, --port=<port number> The port where  the  database  server  is
50            listening (in case of client/server database)
51
52            -d,  --name=<name>  The name of the database where the alerts will
53            be stored
54
55            -u, --user=<user> User of the database (in case  of  client/server
56            database)
57
58            -P,   --pass=<password>   Password   for  the  user  (in  case  of
59            client/server database)
60
61
62
63       --debug=<INAME>
64            Option for the debug plugin
65
66            -o, --object=<name> Name of IDMEF object to print (no object  pro‐
67            vided will print the entire message)
68
69            -l,  --logfile=<file  name> Specify output file to use (default to
70            stdout)
71
72
73
74       --textmod=<INAME>
75            Option for the textmod plugin
76
77            -l, --logfile=<file name> Specify logfile to use
78
79
80
81       --xmlmod=<INAME>
82            Option for the xmlmod plugin
83
84            -l, --logfile=<file name> Specify output file to use
85
86            -v, --validate=<xml> Validate IDMEF XML output against DTD
87
88            -f, --format=<format> Format XML output so that it is readable
89
90            -d, --disable-buffering=<boolean> Disable output file buffering to
91            prevent truncated tags
92
93            --idmef-criteria-filter=<INAME> Filter message based on IDMEF cri‐
94            teria
95
96            -r, --rule=<rule> Filter rule, or filename containing rule
97
98            --hook=<value> Where the filter should be hooked (reporting|plugin
99            name)
100
101
102
103       --config=<file name>
104            Configuration file to use
105
106       -v, --version
107            Print version number
108
109       -D, --debug-level=<level>
110            Run in debug mode
111
112       -d, --daemon
113            Run in daemon mode
114
115       -P, --pidfile=<file name>
116            Write Prelude PID to pidfile
117
118       -l, --listen=<address>
119            Address the sensors server should listen on (addr:port)
120
121       -f, --failover=<boolean>
122            Enable failover for specified report plugin
123
124       -h, --help
125            Print help
126
127

FILES

129       /etc/prelude/prelude-manager.conf - the configuration file
130
131

BUGS

133       This man page hadn't been proof-read yet.
134
135

SEE ALSO

137       prelude-adduser(1)
138
139
140
141                                                            prelude-manager(1)
Impressum