FEVER(1)

πŸ’– FEVER β€” like, the manual page, bestie πŸ’–

okay so before we even get into it: this is FEVER(1), section 1 of the manual, and I'm gonna walk you through it like we're texting at 2am. grab a snack. πŸ“


✨ NAME ✨

fever β€” the fast, extensible and flexible event router. that's it, that's the whole name section, but the way I need you to understand that "fast" and "flexible" are doing SO much heavy lifting here. πŸ‘‘


🌸 SYNOPSIS 🌸

fever [flags]

yeah bestie that's literally the whole thing. no positional args, no fancy subcommand syntax at this level β€” you just run fever and hand it some flags. it's giving minimalist. it's giving confident. πŸ’…


πŸ¦‹ DESCRIPTION πŸ¦‹

okay so here's the actual tea. FEVER is a fast execution engine β€” say it with me β€” for processing, aggregation and reporting components that act on Suricata's EVE output. πŸŽ€

so like: Suricata spits out EVE, FEVER picks it up and runs all your little components over it, does the processing thing, does the aggregation thing, does the reporting thing. that's the vibe. that's the whole job. and it does it fast, which, iconic. ✨


πŸ‘‘ OPTIONS πŸ‘‘

here we go, the flag buffet. every single one, no skipping, I promised. 🫢

  • --config="" β€” the config file, bestie. and lowkey important: the default is $HOME/.fever.yaml. so if you just run it with nothing, that's where it's looking. πŸ‘€
  • -h, --help[=false] β€” prints the help for fever. yes it defaults to false, yes you have to actually ask for it. when you're lost, run this. it's your emotional support flag. 😭
  • --mgmt-host="" β€” the hostname:port definition for the management server. note the empty default β€” you're supplying this, not FEVER. πŸ’œ
  • --mgmt-network="tcp" β€” the network definition for the management server, and it takes tcp or udp. default's tcp. 🌈
  • --mgmt-socket="/tmp/fever-mgmt.sock" β€” the socket path for the management server. default is /tmp/fever-mgmt.sock, exactly like that, don't get creative with the path unless you mean to. ⭐
ngl the management server options are the ones people forget about and then wonder why nothing's talking to anything. just saying. πŸ™ˆ

πŸ’« SEE ALSO πŸ’«

your reading list, your little fam of pages, go give them a visit:


and that's the page!! πŸ’–βœ¨ this whole thing is from the FEVER manual, dated Sep 2025 β€” so if you're reading this way later, hi, hope it still slays. go route some events, bestie. you've got this. πŸŽ€πŸ¦‹πŸ’…

πŸ“¦ where this page comes from