Splunk Search

Can we hide certain values of data like account number?

santosh11
New Member

Dear Team,

As per my requirement i need to make few sensitive client data not visible. Can we do something like account number: 1234 as 1**4 so that we can hide account number details from others.

Can we do this while we are forwarding the data from forwarders to Splunk indexers or is there any other way?

Please help me with the above requirements.

Regards,
Santosh

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Yes, you can do this and it's quite common. It must be done by an indexer or heavy forwarder, however, not by a universal forwarder. See https://docs.splunk.com/Documentation/Splunk/7.3.1/Data/Anonymizedata.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Yes, you can do this and it's quite common. It must be done by an indexer or heavy forwarder, however, not by a universal forwarder. See https://docs.splunk.com/Documentation/Splunk/7.3.1/Data/Anonymizedata.

---
If this reply helps you, Karma would be appreciated.

santosh11
New Member

Dear Richgalloway,

Thanks for the response. It was really helpful

0 Karma
Get Updates on the Splunk Community!

New Splunk Observability innovations: Deeper visibility and smarter alerting to ...

You asked, we delivered. Splunk Observability Cloud has several new innovations giving you deeper visibility ...

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...