CLI command
skarbiec audit-query
Filter local audit provenance by operation, consumer, item, and inclusive time bounds.
Invocation#
skarbiec audit-query [--op <operation>] [--consumer <name>] [--item <id>] [--since <iso>] [--until <iso>] [--limit <1..10000>]Purpose#
Filter local audit provenance by operation, consumer, item, and inclusive time bounds.
Required inputs and options#
- All filters are optional. --limit defaults to 100 and bounds the returned tail of all matches.
Output and state effects#
- Prints matched, returned, and entries without decrypting any credential or changing the journal.
Refusals#
- Refuses a non-integer, zero, or greater-than-10000 limit and does not treat malformed journal data as a clean empty result.