Go to Cmd
All Collections
Product Documentation
Product Documentation
Learn how to set up and use Cmd.
Setup
Initial setup
Global security settings
Global integration permissions
IPs and domains to allowlist
How to automatically scrub sensitive data
How to modify your email settings
Timed session termination
Agent installation guides
How to install an agent via Apt or Yum
Deployment guide — Cmd Audit on EKS, AKS, GKE, or OpenShift (DaemonSet)
Deployment guide — Container Optimized Linux Distributions
Single-server deployment guide (Bash script)
Deployment guide — Cmd Audit / Cmd Free agent
Deployment guide — Cmd Control agent
Container deployment guide — Cmd Control
Terraform deployment example
Ansible install playbook example
Supervisord deployment guide
Chef install recipe example
Puppet install manifest example
AWS SSM deployment guide
AWS EC2 deployment guide
User accounts
Types of User Accounts
Teammates settings
How to set up your user account
2-factor authentication setup guide
How to view your account settings and activity
How to update your timezone
How to change your password
How to log in or out
Reports
Reports overview
Tutorial: how to make new reports
How to share reports
How to edit and delete reports
How to copy reports
Projects
Projects overview
Project settings glossary
Add a third-party integration to a project
How to review project history
How to add users to Cmd projects
How to add new projects
How to switch between projects
How to rename & delete projects
Data Export
Data export schema
How to export Cmd data to S3
How to export Cmd data to GCP
How to access exported data using AWS Redshift
Use AWS Athena to analyze Cmd data
How to download and examine objects with jq
Legacy data export schema
Access exported Cmd data using AWS Redshift Spectrum
Access exported Cmd data using AWS S3 Select
Integrations
PagerDuty integration guide
Third-party integrations overview
Glossary of third-party integrations
Jira Integration — Setup Guide
Duo Integration — Setup Guide
Okta SCIM & SSO — Setup Guide
Azure AD SSO via SAML — Setup Guide
Azure SCIM — Setup guide
Slack Integration — Setup Guide
Elastic webhook — setup guide
Opsgenie Webhook — Setup Guide
Splunk webhook — setup guide
Custom Webhooks — Setup Overview
xMatters Webhook — Setup Guide
Slack Webhook — Setup Guide
Sumo Logic Webhook — Setup Guide
Microsoft Teams webhook — Setup Guide
Triggers and alerts
CQL character matching — syntax guide
Triggers overview
Trigger best practices and examples
How to add new triggers
How to copy a trigger between projects
How to troubleshoot triggers
Trigger actions overview
2FA on session connect — setup guide
Simple 2FA prompts — setup guide
How to limit when triggers fire for authenticated users
How to rename and delete trigger groups
How to add new trigger groups
Agent self-protection triggers
The Web App
The Cmd Web App Terminal
The 'Home' page
The 'Servers' page
The 'Alerts' page
The 'Sessions' page
The Cmd agent
Cmd Audit agent troubleshooting guide
Monitor environment variables
The agent status API
The agent download endpoint
How to disable or uninstall the Cmd agent
How to manage server groups
Cmd Control agent troubleshooting guide
Appendix
Cmd Audit Open Source Software BSD Copyright Attributions
Cmd Control Open Source Software BSD Copyright Attributions
Enable or disable access for Cmd support
Agent diagnostic reports — Overview
Cmd CQL
Glossary of Cmd-generated server terminal messages
Cmd webhook CQL properties glossary
Example POST body
Known Issues
'man' / 'mandb' crashes on Ubuntu
Upstart — known issue with SSH daemon
Why do GCP VM SSH sessions appear as two sessions in Cmd?
