FEVER(1)
π FEVER β like, the manual page, bestie π
okay so before we even get into it: this is FEVER(1), section 1 of the manual, and I'm gonna walk you through it like we're texting at 2am. grab a snack. π
β¨ NAME β¨
fever β the fast, extensible and flexible event router. that's it, that's the whole name section, but the way I need you to understand that "fast" and "flexible" are doing SO much heavy lifting here. π
πΈ SYNOPSIS πΈ
fever [flags]
yeah bestie that's literally the whole thing. no positional args, no fancy subcommand syntax at this level β you just run fever and hand it some flags. it's giving minimalist. it's giving confident. π
π¦ DESCRIPTION π¦
okay so here's the actual tea. FEVER is a fast execution engine β say it with me β for processing, aggregation and reporting components that act on Suricata's EVE output. π
so like: Suricata spits out EVE, FEVER picks it up and runs all your little components over it, does the processing thing, does the aggregation thing, does the reporting thing. that's the vibe. that's the whole job. and it does it fast, which, iconic. β¨
π OPTIONS π
here we go, the flag buffet. every single one, no skipping, I promised. π«Ά
--config=""β the config file, bestie. and lowkey important: the default is$HOME/.fever.yaml. so if you just run it with nothing, that's where it's looking. π-h,--help[=false]β prints the help forfever. yes it defaults tofalse, yes you have to actually ask for it. when you're lost, run this. it's your emotional support flag. π--mgmt-host=""β thehostname:portdefinition for the management server. note the empty default β you're supplying this, not FEVER. π--mgmt-network="tcp"β the network definition for the management server, and it takestcporudp. default'stcp. π--mgmt-socket="/tmp/fever-mgmt.sock"β the socket path for the management server. default is/tmp/fever-mgmt.sock, exactly like that, don't get creative with the path unless you mean to. β
ngl the management server options are the ones people forget about and then wonder why nothing's talking to anything. just saying. π
π« SEE ALSO π«
your reading list, your little fam of pages, go give them a visit:
and that's the page!! πβ¨ this whole thing is from the FEVER manual, dated Sep 2025 β so if you're reading this way later, hi, hope it still slays. go route some events, bestie. you've got this. ππ¦π
π¦ where this page comes from
- ubuntu resolute: fever 1.4.0-1 Β· BSD-3-Clause
- ubuntu stonking: fever 1.4.0-1 Β· BSD-3-Clause
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms