audit — View the audit log

# Show every entry of the audit log at the default path (cwsweep-audit.jsonl) as a table
cwsweep audit

# Specify the path and output format
cwsweep audit --audit-log-path /var/log/cwsweep/audit.jsonl --output json

audit does not connect to AWS and never modifies the audit log. If the file does not exist, it exits successfully with an empty result. Malformed lines are skipped with a warning on stderr (valid entries before and after them are still shown).