https://community.splunk.com/t5/Splunk-Dev/Can-I-create-an-eval-function-using-a-python-script/m-p/495795#M8911 <P>I know how to mask data at indexing time using EVAL and SEDCMD. <BR />But there are more logics I need to consider.</P> <P>Can I mask data using python script at indexing time or is there any method like that or can I create an eval function using a python script?</P> Sun, 07 Jun 2020 18:12:24 GMT zchandikaz 2020-06-07T18:12:24Z https://community.splunk.com/t5/Splunk-Dev/Can-I-create-an-eval-function-using-a-python-script/m-p/495795#M8911 <P>I know how to mask data at indexing time using EVAL and SEDCMD. <BR />But there are more logics I need to consider.</P> <P>Can I mask data using python script at indexing time or is there any method like that or can I create an eval function using a python script?</P> Sun, 07 Jun 2020 18:12:24 GMT https://community.splunk.com/t5/Splunk-Dev/Can-I-create-an-eval-function-using-a-python-script/m-p/495795#M8911 zchandikaz 2020-06-07T18:12:24Z https://community.splunk.com/t5/Splunk-Dev/Can-I-create-an-eval-function-using-a-python-script/m-p/503812#M8912 <P>Using Splunk Enterprise you wouldnt be able to do this if you're ingesting through the typical mechanisms.&nbsp;</P><P>The only thing that I can think of that would allow you to do this is using Splunk Data Stream Processor (DSP) - which allows you to create custom functions to apply to data streams and could be used for encryption/masking etc.</P><P><A href="https://docs.splunk.com/Documentation/DSP/1.1.0/User/PluginSDK" target="_blank">https://docs.splunk.com/Documentation/DSP/1.1.0/User/PluginSDK</A></P><P>&nbsp;</P> Wed, 10 Jun 2020 22:10:18 GMT https://community.splunk.com/t5/Splunk-Dev/Can-I-create-an-eval-function-using-a-python-script/m-p/503812#M8912 livehybrid 2020-06-10T22:10:18Z