Getting Data In

How do you mask or hash an IP address in a log?

bwniranjan
New Member

I need to mask or hash an IP address from an Apache log in Splunk. Is there anyway we can do?

Tags (2)
0 Karma

niketnilay
Legend

@bwniranjan if your intent is to mask ip address prior to indexing you can refer to the following documentation: http://docs.splunk.com/Documentation/Splunk/latest/Data/Anonymizedata

If your intent is to mask IP address at search time you can use rex command with sed

Please confirm which one of the above two you need in case you need further details for either one!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

bwniranjan
New Member

Ask is user who is searching the event in Splunk dashboard should not see the IP address.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...