Skip to content

stratumctl flow-logs

Manage flow logs

Terminal window
stratumctl flow-logs [flags]

Aliases: flow-log, fl

Create a flow log (captures traffic verdicts into a log group)

Terminal window
stratumctl flow-logs create [flags]
Terminal window
stratumctl flow-logs create --project p-team-a --resource vpc-9k2m4x7q --log-group lg-2k8m4x7q9a
stratumctl flow-logs create --project p-team-a --resource-type subnet --resource subnet-3k8m2x7q --log-group lg-2k8m4x7q9a --traffic-type all
Flag Type Default Description
--log-group string Destination log group ID (required)
--project string Project ID (defaults to STRATUM_PROJECT or profile project_id)
--resource string The VPC / subnet / NIC to capture (required)
--resource-type string vpc Captured scope: vpc | subnet | networkInterface
--traffic-type string Captured verdicts: reject (default) | accept | all

Delete a flow log (reaps the capture ACLs)

Terminal window
stratumctl flow-logs delete <fl-id> [flags]
Terminal window
stratumctl flow-logs delete fl-6k2m8x4q7a
Flag Type Default Description
--project string Project ID (defaults to STRATUM_PROJECT or profile project_id)

Describe a flow log

Terminal window
stratumctl flow-logs get <fl-id> [flags]
Terminal window
stratumctl flow-logs get fl-6k2m8x4q7a
stratumctl flow-logs get fl-6k2m8x4q7a --output json
Flag Type Default Description
--project string Project ID (defaults to STRATUM_PROJECT or profile project_id)

List flow logs in a project

Terminal window
stratumctl flow-logs list [flags]
Terminal window
stratumctl flow-logs list
stratumctl flow-logs list --vpc vpc-9k2m4x7q --output json
Flag Type Default Description
--project string Project ID (defaults to STRATUM_PROJECT or profile project_id)
--vpc string Filter by VPC ID