Expand description
Token lookup pattern exporter.
⚠️ DEPRECATED: Use token-analysis --export instead.
This command has been consolidated into the unified token-analysis command.
Use the --export flag for CSV export with per-accessor detail.
# Old command (deprecated)
vault-audit token-export audit.log --output lookups.csv --min-lookups 100
# New command (recommended)
vault-audit token-analysis audit.log --export lookups.csv --min-operations 100See token_analysis module for full documentation.
Exports token lookup patterns to CSV for further analysis. Identifies entities with high token lookup volumes and their patterns. Supports multi-file analysis for historical trending.
§Usage
# Single file export
vault-audit token-export audit.log --output lookups.csv
# Multi-day export with filtering
vault-audit token-export *.log --output lookups.csv --min-lookups 100§Output
Generates a CSV file with columns:
- Entity ID
- Display name
- Token accessor
- Lookup count
- First seen timestamp
- Last seen timestamp
- Duration (time between first and last seen)
Useful for:
- Token usage trending
- Token lifetime analysis
- Identifying long-lived vs short-lived tokens