https://community.splunk.com/t5/Getting-Data-In/anonymize-before-indexed-extractions/m-p/270954#M52012 <P>My colleague Johannes @jeffland had a similar issue, and provides a working solution here: <A href="https://answers.splunk.com/answers/312173/how-can-i-anonymize-fields-of-data-that-has-underg.html">https://answers.splunk.com/answers/312173/how-can-i-anonymize-fields-of-data-that-has-underg.html</A><BR /> The approach of modifying <CODE>_meta</CODE> directly should help you with looking for a pattern in varying fields.</P> Sun, 13 Dec 2015 10:23:19 GMT martin_mueller 2015-12-13T10:23:19Z https://community.splunk.com/t5/Getting-Data-In/anonymize-before-indexed-extractions/m-p/270953#M52011 <P>Hi,</P> <P>I have a CSV input and want to anonymize data, but with SEDCMD it only works for _raw field. The fields created from indexed_extractions are not anonymized.<BR /> The fields of the CSV vary and the pattern I need to anonymize can occur in multiple fields.</P> <P>Does anybody have a hint for me?</P> <P>Best regards,<BR /> Thomas</P> Tue, 29 Sep 2020 08:07:01 GMT https://community.splunk.com/t5/Getting-Data-In/anonymize-before-indexed-extractions/m-p/270953#M52011 goelli 2020-09-29T08:07:01Z https://community.splunk.com/t5/Getting-Data-In/anonymize-before-indexed-extractions/m-p/270954#M52012 <P>My colleague Johannes @jeffland had a similar issue, and provides a working solution here: <A href="https://answers.splunk.com/answers/312173/how-can-i-anonymize-fields-of-data-that-has-underg.html">https://answers.splunk.com/answers/312173/how-can-i-anonymize-fields-of-data-that-has-underg.html</A><BR /> The approach of modifying <CODE>_meta</CODE> directly should help you with looking for a pattern in varying fields.</P> Sun, 13 Dec 2015 10:23:19 GMT https://community.splunk.com/t5/Getting-Data-In/anonymize-before-indexed-extractions/m-p/270954#M52012 martin_mueller 2015-12-13T10:23:19Z