I have a project to send postgresql logs to ELK.
i have tried using a setup to parse through postgres logs and send them to elasticsearch until i saw filebeat can now support postgresql logs.
now there are concerns that postgresql logging may log queries which are problematic and that may contain sensitive data as insert/update params.
i saw this extension (in ruby but there is a similar one in go) that can mask params in the query.
i guess sometime later, this module will have to anonymize the query params for the sake of security/GDPR etc.
can this be done at filebeat level?
i even thought of doing it at the logstash level, but looks like jruby does not like c extensions
any help or guidance would be appreciated.