redact

redact #

Category	Scope
Governance	record

The “redact” pipeline processor: mask sensitive substrings (phone numbers, national ids, cards, emails or arbitrary regexes) in the configured string fields before the record is shipped or stored.

Configuration #

Field	Type	Default	Description
`fields`	liststring		Source fields to read from.
`patterns`	liststring		Extraction patterns tried in order; the first match wins.
`replacement`	string	“***”	Replacement text used by the substitution.

Example #

processor:
  - redact:
      fields: ["message", "tags"]
      patterns: ["%{IP:client} %{WORD:verb} %{URIPATHPARAM:request}"]
      replacement: "replacement"