Module token_export

Module token_export 

Source
Expand description

Token lookup pattern exporter.

⚠️ DEPRECATED: Use token-analysis --export instead.

This command has been consolidated into the unified token-analysis command. Use the --export flag for CSV export with per-accessor detail.

# Old command (deprecated)
vault-audit token-export audit.log --output lookups.csv --min-lookups 100

# New command (recommended)
vault-audit token-analysis audit.log --export lookups.csv --min-operations 100

See token_analysis module for full documentation.


Exports token lookup patterns to CSV for further analysis. Identifies entities with high token lookup volumes and their patterns. Supports multi-file analysis for historical trending.

§Usage

# Single file export
vault-audit token-export audit.log --output lookups.csv

# Multi-day export with filtering
vault-audit token-export *.log --output lookups.csv --min-lookups 100

§Output

Generates a CSV file with columns:

  • Entity ID
  • Display name
  • Token accessor
  • Lookup count
  • First seen timestamp
  • Last seen timestamp
  • Duration (time between first and last seen)

Useful for:

  • Token usage trending
  • Token lifetime analysis
  • Identifying long-lived vs short-lived tokens

Functions§

run