Can we hide certain values of data like account number?

[santosh11]

Dear Team,

As per my requirement i need to make few sensitive client data not visible. Can we do something like account number: 1234 as 1**4 so that we can hide account number details from others.

Can we do this while we are forwarding the data from forwarders to Splunk indexers or is there any other way?

Please help me with the above requirements.

Regards,
Santosh

[richgalloway · Accepted solution]

Yes, you can do this and it's quite common. It must be done by an indexer or heavy forwarder, however, not by a universal forwarder. See https://docs.splunk.com/Documentation/Splunk/7.3.1/Data/Anonymizedata.

[santosh11]

Dear Richgalloway,

Thanks for the response. It was really helpful