Getting Data In

Masking email

toporagno
Explorer

i need to masking email on my data, i'm tring using transforms.com but

[emailaddr-anonymizer]
REGEX = ([A-z0-9._%+-]+@[A-z0-9.-]+\.[A-z]{2,63})
FORMAT = ********@*********
DEST_KEY = _raw

 if I do this the entire log is masked, however I want only the email to be masked,

please can someone help me

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The easier way to mask data is with SEDCMD in props.conf.

SEDCMD-emailaddr-anonymizer = s/([A-z0-9\._%+-]+@[A-z0-9\.-]+\.[A-z]{2,63})/********@*********/g

 

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The easier way to mask data is with SEDCMD in props.conf.

SEDCMD-emailaddr-anonymizer = s/([A-z0-9\._%+-]+@[A-z0-9\.-]+\.[A-z]{2,63})/********@*********/g

 

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...