Viewing / deleting decisions with cscli
When I check
cscli decisions list I see one decision, related to my earlier testing. If I cscli decisions delete <id> it says the decision was deleted, then when i check the list again there's a new decision in the list with a decremented ID number. Seems like there were ~19 from one run with nikto. Is it normal to not see all decisions in the list? Is there a way to view / delete them all?4 Replies
Important Information
This post has been marked as resolved. If this is a mistake please press the red button below or type
/unresolve© Created By WhyAydan for CrowdSec ❤️
cscli decisions list only shows the last decision that was generated by an IP, to delete all at the same time you can just run cscli decisions delete --ip <ip> as it will remove all decisions tied to an IP rather than just a single ID.
You can also run cscli alerts list to see all generated alerts@Loz thanks again, still getting the hang of cscli etc.
Resolving Viewing / deleting decisions with cscli
This has now been resolved. If you think this is a mistake please run
/unresolve