Mask Sensitive Data in URLs

Kay_Koedel — Mon, 09 Dec 2019 15:29:18 GMT

We want to mask sensitive data that comes with URLs or Params to our services.

The Sensitive Data can be Found with regex.

This can come at any part of a url

for example:

http://server.com/endpoint/sensitiv/get

http://server.com/endpoint/get/sensitiv/

We want to add a rule that masks all the URLs with *

http://server.com/endpoint/sensitiv123/get --> BT /endpoint/***/get

http://server.com/endpoint/get/sensitiv456/ --> BT /endpoint/get/***

I found the documentation:

https://docs.appdynamics.com/display/PRO45/Filter+Sensitive+Data

But it is not working. Can you give an example of how it will work for the given examples?

Re: Mask Sensitive Data in URLs

Kay_Koedel — Wed, 11 Dec 2019 11:40:18 GMT

It was told by Appd Support that this is not possible:

"If that is the case, then the sensitive data filter will not solve your purpose. Rather, you'll need to define custom Servlet BT detection rules based on the URI matching with a regular expression. Please refer to https://docs.appdynamics.com/display/PRO45/URI+Based+Entry+Points for more information on this."

topic Mask Sensitive Data in URLs in Splunk AppDynamics

Mask Sensitive Data in URLs

Re: Mask Sensitive Data in URLs