alto log

What happened on this device, and who did it: sessions started and ended, who attached, typed (how much, never what) and was refused, pairings. Each entry is signed by this device and names the one before, so `alto log verify` finds any changed, removed or moved

Usage

What happened on this device, and who did it: sessions started and ended, who attached, typed (how much, never what) and was refused, pairings. Each entry is signed by this device and names the one before, so `alto log verify` finds any changed, removed or moved

Usage: alto log [OPTIONS] [COMMAND]

Commands:
  verify  Check that each entry is signed by this device and follows on from the one before; says the first that doesn't. Exits 1 if one doesn't
  export  The log as OCSF 1.3 events, one JSON object per line, for a security team's tools (a SIEM): sessions as Process Activity, attaching as Authentication, typing and refusals as API Activity, pairings as Account Change, the rules as Entity Management. Each entry is kept whole under `unmapped`
  help    Print this message or the help of the given subcommand(s)

Options:
      --on <DEVICE>   Work with the sessions on another device, paired with before (`alto devices`), or one of your own on Tailscale by its name there: for the session commands (ls, new, attach, send, run, wait, capture, kill, pause, resume, fetch, work). A session named `studio:3`, as `ls --all` prints it, needs no --on
      --since <AGO>   Only what happened since this long ago: 30m, 2h, 1d
      --session <ID>  Only what happened in this session
      --by <WHO>      Only what this did: a device's name, a login, an agent, or a user here
      --json          One JSON object per line, as kept
  -h, --help          Print help

alto log verify

Check that each entry is signed by this device and follows on from the one before; says the first that doesn't. Exits 1 if one doesn't

Check that each entry is signed by this device and follows on from the one before; says the first that doesn't. Exits 1 if one doesn't

Usage: alto log verify [OPTIONS]

Options:
      --dir <DIR>     A copy of a log folder, rather than this device's
      --on <DEVICE>   Work with the sessions on another device, paired with before (`alto devices`), or one of your own on Tailscale by its name there: for the session commands (ls, new, attach, send, run, wait, capture, kill, pause, resume, fetch, work). A session named `studio:3`, as `ls --all` prints it, needs no --on
      --key <KEY>     The public key (hex) it should be signed with, rather than this device's
      --since <AGO>   Only what happened since this long ago: 30m, 2h, 1d
      --session <ID>  Only what happened in this session
      --by <WHO>      Only what this did: a device's name, a login, an agent, or a user here
  -h, --help          Print help

alto log export

The log as OCSF 1.3 events, one JSON object per line, for a security team's tools (a SIEM): sessions as Process Activity, attaching as Authentication, typing and refusals as API Activity, pairings as Account Change, the rules as Entity Management. Each entry is kept whole under `unmapped`

The log as OCSF 1.3 events, one JSON object per line, for a security team's tools (a SIEM): sessions as Process Activity, attaching as Authentication, typing and refusals as API Activity, pairings as Account Change, the rules as Entity Management. Each entry is kept whole under `unmapped`

Usage: alto log export [OPTIONS] --ocsf

Options:
      --ocsf          As OCSF (the only format, for now)
      --on <DEVICE>   Work with the sessions on another device, paired with before (`alto devices`), or one of your own on Tailscale by its name there: for the session commands (ls, new, attach, send, run, wait, capture, kill, pause, resume, fetch, work). A session named `studio:3`, as `ls --all` prints it, needs no --on
      --since <AGO>   Only what happened since this long ago: 30m, 2h, 1d
      --session <ID>  Only what happened in this session
      --by <WHO>      Only what this did: a device's name, a login, an agent, or a user here
  -h, --help          Print help

Generated from alto 0.0.1 by tools/export-reference.py.