Module kv_compare

Module kv_compare 

Source
Expand description

KV usage comparison across time periods.

⚠️ DEPRECATED: Use kv-analysis compare instead.

# Old (deprecated):
vault-audit kv-compare old_usage.csv new_usage.csv

# New (recommended):
vault-audit kv-analysis compare old_usage.csv new_usage.csv

See kv_analysis for the unified command.


Compares KV secrets engine usage between two CSV exports to identify changes in access patterns over time.

§Usage

# Generate two CSV files from different time periods
vault-audit kv-analyzer old-audit.log --output old-usage.csv
vault-audit kv-analyzer new-audit.log --output new-usage.csv

# Compare them
vault-audit kv-compare old-usage.csv new-usage.csv

§Output

Displays comparison metrics by mount point:

  • Change in total operations
  • Change in unique secrets accessed
  • Change in entity count
  • Percentage changes

Helps identify:

  • Growing or shrinking KV usage
  • New secrets being accessed
  • Secrets no longer used
  • Changes in access patterns

Functions§

run