CLI command

skarbiec audit-query

Filter local audit provenance by operation, consumer, item, and inclusive time bounds.

Invocation#

Shell
skarbiec audit-query [--op <operation>] [--consumer <name>] [--item <id>] [--since <iso>] [--until <iso>] [--limit <1..10000>]

Purpose#

Filter local audit provenance by operation, consumer, item, and inclusive time bounds.

Required inputs and options#

  • All filters are optional. --limit defaults to 100 and bounds the returned tail of all matches.

Output and state effects#

  • Prints matched, returned, and entries without decrypting any credential or changing the journal.

Refusals#

  • Refuses a non-integer, zero, or greater-than-10000 limit and does not treat malformed journal data as a clean empty result.