Expand description
Path hotspot analysis command.
Identifies the most frequently accessed paths in Vault to help understand usage patterns and potential performance bottlenecks. Supports multi-file analysis for long-term trending.
§Usage
# Single file - show top 20 hotspots (default)
vault-audit path-hotspots audit.log
# Multi-day analysis with top 50
vault-audit path-hotspots logs/*.log --top 50
# Filter by mount point across multiple files
vault-audit path-hotspots day*.log --mount secret§Output
Displays top accessed paths with:
- Path name
- Total operations
- Unique entities accessing
- Operation breakdown (read/write/list/delete)
- Access rate (ops per hour)
- Top entity contributors
Helps identify:
- Performance bottlenecks
- Heavily used secrets
- Caching opportunities
- Load distribution