Is it possible to customize the splunk log (mask data or redact the field etc)?

[suguna]

I am looking for details if it possible to customize the splunk logs , like mask the data or redact the field or display only required fields in the logs

[gcusello]

Hi @suguna,

for my knowledge, it isn't possible.

It's only possible to set up the logging level for all kind of logs at [Settings -- Server Settings -- Server Logging], the same configurations are in $SPLUNK_HOME/etc/log.cfg.

But anyway, If it's mandatory for you, you could ask to Splunk Professional Services to make a customization for you.

Ciao.

Giuseppe