https://community.splunk.com/t5/Getting-Data-In/Masking-email/m-p/674282#M112858 <P>i need to masking email on my data, i'm tring using transforms.com but</P> <LI-CODE lang="markup">[emailaddr-anonymizer] REGEX = ([A-z0-9._%+-]+@[A-z0-9.-]+\.[A-z]{2,63}) FORMAT = ********@********* DEST_KEY = _raw</LI-CODE> <P>&nbsp;if I do this the entire log is masked, however I want only the email to be masked,</P> <P>please can someone help me</P> Mon, 15 Jan 2024 15:10:00 GMT toporagno 2024-01-15T15:10:00Z https://community.splunk.com/t5/Getting-Data-In/Masking-email/m-p/674282#M112858 <P>i need to masking email on my data, i'm tring using transforms.com but</P> <LI-CODE lang="markup">[emailaddr-anonymizer] REGEX = ([A-z0-9._%+-]+@[A-z0-9.-]+\.[A-z]{2,63}) FORMAT = ********@********* DEST_KEY = _raw</LI-CODE> <P>&nbsp;if I do this the entire log is masked, however I want only the email to be masked,</P> <P>please can someone help me</P> Mon, 15 Jan 2024 15:10:00 GMT https://community.splunk.com/t5/Getting-Data-In/Masking-email/m-p/674282#M112858 toporagno 2024-01-15T15:10:00Z https://community.splunk.com/t5/Getting-Data-In/Masking-email/m-p/674284#M112859 <P>The easier way to mask data is with <FONT face="courier new,courier">SEDCMD</FONT> in props.conf.</P><LI-CODE lang="markup">SEDCMD-emailaddr-anonymizer = s/([A-z0-9\._%+-]+@[A-z0-9\.-]+\.[A-z]{2,63})/********@*********/g</LI-CODE><P>&nbsp;</P> Mon, 15 Jan 2024 15:49:15 GMT https://community.splunk.com/t5/Getting-Data-In/Masking-email/m-p/674284#M112859 richgalloway 2024-01-15T15:49:15Z