logcheck-filter CLI Reference

This document contains the help content for the logcheck-filter command-line program.

Command Overview:

• logcheck-filter↴
• logcheck-filter file↴
• logcheck-filter stdin↴
• logcheck-filter journald↴

logcheck-filter

Filter logs using logcheck rules

**Usage:** `logcheck-filter [OPTIONS] --rules `

###### Subcommands:

• file — Read from a file
• stdin — Read from standard input
• journald — Read from systemd journal

###### Options:

• `--rules ` — Path to logcheck rules directory
• `--format ` — Output format

Default value: text

Possible values:

• text:

Human-readable text format

• json:

JSON format

• `--show ` — What entries to show

Default value: all

Possible values:

• all:

Show all log entries

• violations:

Show only violations (cracking/violations)

• unmatched:

Show only unmatched entries

• --stats — Show processing statistics
• --color — Enable colored output
• `--output-file ` — Write filtered logs to file

logcheck-filter file

Read from a file

**Usage:** `logcheck-filter file `

###### Arguments:

• `` — Path to log file

logcheck-filter stdin

Read from standard input

Usage: logcheck-filter stdin

logcheck-filter journald

Read from systemd journal

Usage: logcheck-filter journald [OPTIONS]

###### Options:

• `--unit ` — Filter by systemd unit
• --follow — Follow new journal entries
• `--lines ` — Show last N entries