sdm audit ssh

NAME:
   sdm audit ssh - extracts SSH captures with optional support for following the live log

USAGE:
   sdm audit ssh [command options] [arguments...]

OPTIONS:
   --follow, -f                           follow live updates
   --from value                           begin timestamp (default seven days ago)
   --to value                             end timestamp (default now)
   --output value, --out value, -o value  write log to the specified filename
   --json, -j                             output as json
   --timeout value                        timeout for command (applies when --follow is not set)
   --filter value                         filter e.g. 'field:name tag:key=value ...'
   --filters-help                         show valid filter strings and examples
   --page-limit value                     set page limit for API list requests (default: 0)
   --key value, -k value                  file containing the organization private key
   --extended, -e                         show detailed information about each query

For more information on the use of filters in the CLI, see the Filters documentation.