topic Is user-based data masking possible for one-index . in Security

Is user-based data masking possible for one-index .

isha_rastogi — Thu, 04 Feb 2016 13:05:33 GMT

I have different users who will be accessing a index. Problem is I want User "A" to access the original data but for User "B" data would be masked for same index. I tried to create the Python script to mask the information but how to invoke the script on user-session.

Re: Is user-based data masking possible for one-index .

renjith_nair — Thu, 04 Feb 2016 13:10:12 GMT

User role is assigned on index level and hence all or none will be affected. There are two ways you can try

Forward data simultaneously to another index with and mask it (License meter counts)
Run a search to populate a summary index from the original one after masking and give the user access to only summary index (no extra license needed)

Re: Is user-based data masking possible for one-index .

isha_rastogi — Fri, 05 Feb 2016 09:23:05 GMT

What if user wants to see raw events with masked data? I believe summary indexing will be able to produce report or search for fields which are creating summary index.