Is it possible to sanitize the following pieces of information? I've added them to the SanitizeFieldNames setting, but they still come over.
client.ip
http.request.socket.remote_address
user.name
Thanks!
Is it possible to sanitize the following pieces of information? I've added them to the SanitizeFieldNames setting, but they still come over.
client.ip
http.request.socket.remote_address
user.name
Thanks!
Hi @danbrad, welcome on discuss!
In the SanitizeFieldNames
you can define keys that will be checked when the agent reads HTTP headers or the request body when it's form-urlencoded.
The things you list typically don't come from those sources, that's why those still come over.
What you can do is to use the Filter API and set those properties to null
.
Awesome, thanks!
This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.