Getting Data In
Highlighted

How do you mask or hash an IP address in a log?

New Member

I need to mask or hash an IP address from an Apache log in Splunk. Is there anyway we can do?

Tags (2)
0 Karma
Highlighted

Re: How do you mask or hash an IP address in a log?

Legend

@bwniranjan if your intent is to mask ip address prior to indexing you can refer to the following documentation: http://docs.splunk.com/Documentation/Splunk/latest/Data/Anonymizedata

If your intent is to mask IP address at search time you can use rex command with sed

Please confirm which one of the above two you need in case you need further details for either one!




| eval message="Happy Splunking!!!"


Highlighted

Re: How do you mask or hash an IP address in a log?

New Member

Ask is user who is searching the event in Splunk dashboard should not see the IP address.

0 Karma