lgc plugins

The lgc plugins command manages LogCraft CLI plugins to support various types of detections.

lgc plugins install

From a file

This approach is recommended, especially in air-gaped environments.

~$ lgc plugins install foo.wasm

Under the hood, the lgc command will simply copy the plugin into the .logcraft/plugins directory and declare it into the lgc.yaml.

Plugin update

To update or reinstall a plugin, simply install it over the previous one!

From the registry

~$ lgc plugins install @logcraft/splunk:0.9.1
 INFO plugin `@logcraft/splunk` version `0.9.1` successfully installed
~$

Want to contribute? 🚀

The registry doesn't exists yet. Want to contribute to make it a reality faster? Contact us!!

lgc plugins list

This command lists installed plugins.

~$ lgc plugins list
- `splunk` (`0.1.5`)
~$

lgc plugins uninstall

This command removes an installed plugin.

~$ lgc plugins uninstall splunk

If the plugin is used by, or associated to, a service, a confirmation will be required as removing the plugin will also clear the configuration referencing this plugin. This behavior can be forced using the --force option.