Overview

cscli is the utility that will help you to manage crowdsec-agent. This tool has the following functionalities:

• manage decisions and alerts : This is how you monitor ongoing remediation and detections
• manage configurations such as collections, parsers, scenarios : This is how you install/update 's detection capabilities and manage whitelists
• interact with the hub to find new configurations or update existing ones
• manage local api (LAPI) bouncers and machines : This allows you to manage LAPI credentials, this is how you make and bouncers comunicate
• observe crowdsec via metrics or the dashboard : This is how you gain real-time observability
• manage simulation configurations, allowing you to disable/modify remediation triggered by specific scenarios

Take a look at the dedicated documentation

Configuration

cscli shares the configuration file of crowdsec-agent, usually in /etc/crowdsec/config.yaml