Skip to content

Instantly share code, notes, and snippets.

@planetrobbie

planetrobbie/audit.log

Created January 28, 2019 20:47
Show Gist options
  • Save planetrobbie/6d693c798e6e4dcf41ec7c3d04f4985f to your computer and use it in GitHub Desktop.
Save planetrobbie/6d693c798e6e4dcf41ec7c3d04f4985f to your computer and use it in GitHub Desktop.
Download ZIP
Vault Audit snippet
Raw
audit.log
"time":"2019-01-28T20:46:29.435016455Z","type":"request","auth":{"client_token":"","accessor":"","display_name":"","policies":null,"metadata":null,"entity_id":"","token_type":"default"},"request":{"id":"52919fae-6c8e-03f1-51c8-23efb9a0041e","operation":"read","client_token":"","client_token_accessor":"","namespace":{"id":"root","path":""},"path":"sys/replication/status","data":null,"policy_override":false,"remote_address":"130.211.0.225","wrap_ttl":0,"headers":{}},"error":""}
{"time":"2019-01-28T20:46:29.43583858Z","type":"response","auth":{"client_token":"","accessor":"","display_name":"","policies":null,"metadata":null,"entity_id":"","token_type":"default"},"request":{"id":"52919fae-6c8e-03f1-51c8-23efb9a0041e","operation":"read","client_token":"","client_token_accessor":"","namespace":{"id":"root","path":""},"path":"sys/replication/status","data":null,"policy_override":false,"remote_address":"130.211.0.225","wrap_ttl":0,"headers":{}},"response":{"data":{"dr":{"mode":"hmac-sha256:3a4bd796ed9f8ae4195a2d941dfd8cae6323379136125757d9aafb7f0f31896e"},"performance":{"mode":"hmac-sha256:3a4bd796ed9f8ae4195a2d941dfd8cae6323379136125757d9aafb7f0f31896e"}}},"error":""}
{"time":"2019-01-28T20:46:40.679415237Z","type":"request","auth":{"client_token":"","accessor":"","display_name":"","policies":null,"metadata":null,"entity_id":"","token_type":"default"},"request":{"id":"9cabc082-9ca9-0cd8-0c2c-1819e02bbaff","operation":"read","client_token":"","client_token_accessor":"","namespace":{"id":"root","path":""},"path":"sys/replication/status","data":null,"policy_override":false,"remote_address":"130.211.0.235","wrap_ttl":0,"headers":{}},"error":""}
{"time":"2019-01-28T20:46:40.679925048Z","type":"response","auth":{"client_token":"","accessor":"","display_name":"","policies":null,"metadata":null,"entity_id":"","token_type":"default"},"request":{"id":"9cabc082-9ca9-0cd8-0c2c-1819e02bbaff","operation":"read","client_token":"","client_token_accessor":"","namespace":{"id":"root","path":""},"path":"sys/replication/status","data":null,"policy_override":false,"remote_address":"130.211.0.235","wrap_ttl":0,"headers":{}},"response":{"data":{"dr":{"mode":"hmac-sha256:3a4bd796ed9f8ae4195a2d941dfd8cae6323379136125757d9aafb7f0f31896e"},"performance":{"mode":"hmac-sha256:3a4bd796ed9f8ae4195a2d941dfd8cae6323379136125757d9aafb7f0f31896e"}}},"error":""}
{"time":"2019-01-28T20:46:44.038613197Z","type":"request","auth":{"client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","display_name":"userpass-admin","policies":["admin","default"],"token_policies":["admin","default"],"metadata":{"username":"admin"},"entity_id":"0c2d1b73-6c84-6591-39a0-59c20de0dd72","token_type":"service"},"request":{"id":"a7890a36-48d5-008e-8b11-8fbeca5d2b65","operation":"read","client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","client_token_accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","namespace":{"id":"root","path":""},"path":"sys/internal/ui/mounts/kv/bookshelf","data":null,"policy_override":false,"remote_address":"35.241.145.61","wrap_ttl":0,"headers":{}},"error":""}
{"time":"2019-01-28T20:46:44.039599928Z","type":"response","auth":{"client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","display_name":"userpass-admin","policies":["admin","default"],"token_policies":["admin","default"],"metadata":{"username":"admin"},"entity_id":"0c2d1b73-6c84-6591-39a0-59c20de0dd72","token_type":"service"},"request":{"id":"a7890a36-48d5-008e-8b11-8fbeca5d2b65","operation":"read","client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","client_token_accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","namespace":{"id":"root","path":""},"path":"sys/internal/ui/mounts/kv/bookshelf","data":null,"policy_override":false,"remote_address":"35.241.145.61","wrap_ttl":0,"headers":{}},"response":{"data":{"accessor":"hmac-sha256:9c50f924e6aa8744e39a89da6d896604e0e721be6d72c1b19d13b549b3cf0f60","config":{"default_lease_ttl":0,"force_no_cache":false,"max_lease_ttl":0},"description":"hmac-sha256:77889a4f5ca0e2446e7aae3ec9278d802839daec2c449f1d2ba371b35f632fda","local":false,"options":{"version":"hmac-sha256:226ed6ea2fd1cd4e5e6aba05ebbfe999b07cb0a3a18fd480925dc793bbf360a8"},"path":"hmac-sha256:c3e19f52f6894ac56e5659c8a5b296bffb172592054aab5ab17bd073fedcb255","seal_wrap":false,"type":"hmac-sha256:cb12859d3c079afcabeeb7e2bab6dc6928ab9268ece2e5c008ddf018e5a9c219"}},"error":""}
{"time":"2019-01-28T20:46:44.040977893Z","type":"request","auth":{"client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","display_name":"userpass-admin","policies":["admin","default"],"token_policies":["admin","default"],"metadata":{"username":"admin"},"entity_id":"0c2d1b73-6c84-6591-39a0-59c20de0dd72","token_type":"service"},"request":{"id":"32e2321c-b53a-2506-8161-be9e18d557b9","operation":"read","client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","client_token_accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","namespace":{"id":"root","path":""},"path":"kv/bookshelf","data":null,"policy_override":false,"remote_address":"35.241.145.61","wrap_ttl":0,"headers":{}},"error":""}
{"time":"2019-01-28T20:46:44.043600478Z","type":"response","auth":{"client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","display_name":"userpass-admin","policies":["admin","default"],"token_policies":["admin","default"],"metadata":{"username":"admin"},"entity_id":"0c2d1b73-6c84-6591-39a0-59c20de0dd72","token_type":"service"},"request":{"id":"32e2321c-b53a-2506-8161-be9e18d557b9","operation":"read","client_token":"hmac-sha256:76a88132ea638f33db9ff9f7dc5f90f2b72318182501f94226f2e6e3bdc4a089","client_token_accessor":"hmac-sha256:08acc6c82eedc70c6fc90dda4482adfef431b9a80a62f24ea37719b510975c17","namespace":{"id":"root","path":""},"path":"kv/bookshelf","data":null,"policy_override":false,"remote_address":"35.241.145.61","wrap_ttl":0,"headers":{}},"response":{"secret":{"lease_id":""},"data":{"database":"hmac-sha256:239abf7b684a101e18483caed315bbb1c413f7e7524b626ff225cc571a0555ef","host":"hmac-sha256:ed92f1c77cb7e82da7e9c539ed2243c82b52aac720515c0ee2467d7902179632","password":"hmac-sha256:18715b7451bb912b03944f45bc46c59ebef3aaefe53ed8c3268a331af6994e70","project_id":"hmac-sha256:f6d592261ae870403961fa27b13af41029bf04e3ea092c5b0398370e7c3e0039","username":"hmac-sha256:37175fbd2ff0e3596670626c0f29f8d7d75a68e02c5b7d04b3b3bf3dcf84b8b2"}},"error":""}
{"time":"2019-01-28T20:46:50.928384137Z","type":"request","auth":{"client_token":"","accessor":"","display_name":"","policies":null,"metadata":null,"entity_id":"","token_type":"default"},"request":{"id":"6d939d2f-44a9-b222-de81-77a005415b69","operation":"read","client_token":"","client_token_accessor":"","namespace":{"id":"root","path":""},"path":"sys/replication/status","data":null,"policy_override":false,"remote_address":"130.211.0.224","wrap_ttl":0,"headers":{}},"error":""}
{"time":"2019-01-28T20:46:50.928752415Z","type":"response","auth":{"client_token":"","accessor":"","display_name":"","policies":null,"metadata":null,"entity_id":"","token_type":"default"},"request":{"id":"6d939d2f-44a9-b222-de81-77a005415b69","operation":"read","client_token":"","client_token_accessor":"","namespace":{"id":"root","path":""},"path":"sys/replication/status","data":null,"policy_override":false,"remote_address":"130.211.0.224","wrap_ttl":0,"headers":{}},"response":{"data":{"dr":{"mode":"hmac-sha256:3a4bd796ed9f8ae4195a2d941dfd8cae6323379136125757d9aafb7f0f31896e"},"performance":{"mode":"hmac-sha256:3a4bd796ed9f8ae4195a2d941dfd8cae6323379136125757d9aafb7f0f31896e"}}},"error":""}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment