canasta crowdsec alerts

From Canasta Wiki

canasta > crowdsec > alerts

canasta crowdsec alerts

Show recent CrowdSec alerts (detected attacks)

Synopsis

List the alerts the CrowdSec engine has raised — the attacks and probes its scenarios have detected over time. Unlike canasta crowdsec status, which shows the IP decisions currently being enforced, alerts include the detection history (and community/console-sourced events), so this answers "is CrowdSec actually catching anything?". Optionally filter by source IP. Read-only.

canasta crowdsec alerts [flags]

Examples

canasta crowdsec alerts
canasta crowdsec alerts --ip 203.0.113.50
canasta crowdsec alerts -i mysite

Flags

Flag Shorthand Description Default Required Orchestrator
--id -i Canasta instance ID * Both
--ip Show only alerts for this source IP Both

* Defaults to the Canasta instance matching the current directory, if any.

Global Flags

Flag Shorthand Description Default Required Orchestrator
--help -h Show help message and exit Both
--verbose -v Enable verbose output Both