You are right, there is no way to mask the data at search time. This solution is only for the purposes of hiding the data for specific dashboard panel/report.
... View more
Make sure you are sending a copy of your custom props.conf to the UF as well. I had the same issue but it started working when I put a copy of props.conf with my custom sourcetype on UF's.
... View more