Mask plugin matches event with regular expression and substitutions successfully matched symbols via asterix symbol. You could set regular expressions and submatch groups.
Example:
pipelines:
example_pipeline:
...
actions:
- type: mask
metric_subsystem_name: "some_name"
masks:
- mask:
re: "\b(\d{1,4})\D?(\d{1,4})\D?(\d{1,4})\D?(\d{1,4})\b"
groups: [1,2,3]
...masks []Mask
List of masks.
mask_applied_field string
If any mask has been applied then mask_applied_field will be set to mask_applied_value in the event.
mask_applied_value string
applied_metric_name string default=mask_applied_total
The metric name of the regular expressions applied.
applied_metric_labels []string
Lists the event fields to add to the metric. Blank list means no labels. Important note: labels metrics are not currently being cleared.
match_rules matchrule.RuleSets
List of matching rules to filter out events before checking regular expression for masking.
re string
Regular expression for masking.
groups []int
Groups are numbers of masking groups in expression, zero for mask all expression.
max_count int
MaxCount limits the number of masked symbols in the masked output, if zero, no limit is set.
replace_word string
ReplaceWord, if set, is used instead of asterisks for masking patterns that are of the same length or longer.
applied_field string
If the mask has been applied then applied_field will be set to applied_value in the event.
applied_value string
Value to be set in applied_field.
metric_name string
The metric name of the regular expressions applied. The metric name for a mask cannot be the same as metric name for plugin.
metric_labels []string
Lists the event fields to add to the metric. Blank list means no labels. Important note: labels metrics are not currently being cleared.
Generated using insane-doc