cerbos-audit-insights
Installation
SKILL.md
Cerbos Audit and Insights
A Cerbos PDP records every API call it serves and every decision it makes. Where those records go, and what you can ask of them afterwards, is the choice this skill covers.
| Backend | Records land | Queried with | Across a fleet |
|---|---|---|---|
local |
Embedded key-value store on the PDP | Admin API, cerbosctl audit, cerbosctl decisions |
One PDP at a time |
file |
Newline-delimited JSON, a file or stdout/stderr | Whatever agent collects the file | Only what you build |
kafka |
A Kafka topic (JSON or protobuf) | Your consumers | Only what you build |
hub |
Local buffer on the PDP, streamed to Cerbos Hub | Hub console — audit log search, Insights, exports | Yes |
Aggregation across instances, fleet-wide search and the Insights dashboards are Cerbos Hub capabilities. A standalone PDP writes a complete audit trail through the other three backends; what it has no answer for is collecting and querying that trail across every instance. Full backend reference: audit configuration.
Scope
This skill owns audit and decision logging: the audit configuration block and its backends, decision log filters, masks, and reading entries back through cerbosctl, the Hub audit log, Insights, usage and exports.
Route adjacent work elsewhere: