simply i need to mask data in events
before masking i need to consider log level, logger and some conditions
So if i can write a script to mask, it'll be easy
... View more
No No
I simply want to mask some data using transforms.conf and props.conf. I know how to do it using SEDCMD or EVAL.But i need to consider more conditions before masking. So i need to use a python script to do it. But i don't know how to do it
Thanks
... View more
I know how to mask data at indexing time using EVAL and SEDCMD. But there are more logics I need to consider.
Can I mask data using python script at indexing time or is there any method like that or can I create an eval function using a python script?
... View more
Yes
Do you know alter data in transforms.conf using python program. I couldn't find a example to alter using python as i alter data using SEDCMD.
Thank you very much
... View more
I need to alter data in splunk using props.conf I need to use external_cmd to run python script Can you give me a example python script for that.
Thanks
... View more