add ui

README.md

@@ -21,6 +21,12 @@ Or use the helper script, which creates/uses `.venv` automatically and runs `pip
 ./start.sh stop
 ```
 
+`./start.sh` starts three local background processes:
+
+- UDP syslog listener writing `logs/fg_syslog.jsonl`
+- Continuous monitor writing `state/fgai-status.json`
+- Local dashboard at `http://127.0.0.1:8088`
+
 The script activates `.venv` inside the script process. If you also want your current shell prompt to show the venv, run:
 
 ```bash
@@ -39,6 +45,19 @@ Analyze local logs:
 fgai analyze-logs --logs logs/fg_syslog.jsonl
 ```
 
+Open the live UI after `./start.sh`:
+
+```bash
+xdg-open http://127.0.0.1:8088
+```
+
+Score likely traffic anomalies:
+
+```bash
+fgai detect-anomalies --logs logs/fg_syslog.jsonl --min-score 35
+fgai detect-anomalies --logs logs/fg_syslog.jsonl --min-score 35 --llm --llm-timeout 300
+```
+
 Listen for FortiGate syslog locally:
 
 ```bash