About marellasunil_3

marellasunil_3 · ‎03-23-2022

Thanks Venky. It is resolved the issue partially. I found Card details in other location as well As sed command have limitation to use only once, I would like to use regex. I tried regex command as stated above in the custom app deployed in forwarder. But this is not working at all. where do you think I did the mistake? Props.comf [websphere_trlog_sysout] TRANSFORMS-anonymize = session-anonymizer Transforms.conf [session-anonymizer] REGEX = XXXXX FORMAT = $1XXXX$2 DEST_KEY = _raw

marellasunil_3 · ‎03-23-2022

Hi Venky Thanks for the reply I am trying to mask card details, that does not have field Ex: [23/03/2020 13:45:20:123 IST Systemout ..... Card 1234-5678-9012-3456] I would like to mask card details.

marellasunil_3 · ‎03-23-2022

I have a systemout.log file and I am indexing using pretrained sourcetype websphere_trlog_sysout. Currently there is an issue with masking I have created props.conf in the deployment app and deployed to universal forwarder as below. Created transforms.conf to mask the data. Seems the issue is still same. [websphere_trlog_sysout] TIME_FORMAT = %d-%m-%y %H:%M:%S:%3Q %Z TIME_PREFIX = ^\[ FORMAT = $1-$2-$3 $4:$5:$6:$7 $8 TRANSFORMS-anonymize = session-anonymizer [session-anonymizer] REGEX = XXXXX FORMAT = $1XXXX$2 DEST_KEY = _raw

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎03-23-2022

Online Status	Offline
Date Last Visited	‎03-23-2022 01:18 PM

How to get timestamp and mask syslog through unive...

Re: Timestamp and masking syslog through universal...

Re: Timestamp and masking syslog through universal...

How to get timestamp and mask syslog through unive...