Skip to main content
plog policy runs compliance checks against your audit trail.

​
Usage

plog policy check
plog policy check --file policies.yaml
plog policy check --file policies.yaml --policy my-policy
plog policy test --file policies.yaml

​
Subcommands

​
plog policy check

Run policy checks against the audit trail: 
# Run 5 built-in checks
plog policy check

# Run custom YAML policies
plog policy check --file policies.yaml

# Run one specific policy from a file
plog policy check --file policies.yaml --policy my-policy
Flags:
FlagDefaultDescription
--file—Path to custom YAML policy file (omit for builtins)
--policy—Run only this named policy from the file
--db~/.provenlog/events.dbLocal SQLite database path

​
plog policy test

Dry-run custom policies against historical events: 
plog policy test --file policies.yaml
Flags:
FlagDefaultDescription
--file—Required. Path to custom YAML policy file
--db~/.provenlog/events.dbLocal SQLite database path
See Policy Engine for details on built-in policies and custom rule types.