Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-17959

option to redact sensitive data from system logs

    • Type: Icon: New Feature New Feature
    • Resolution: Done
    • Priority: Icon: Major - P3 Major - P3
    • 3.3.10
    • Affects Version/s: None
    • Component/s: Logging, Security
    • None
    • Fully Compatible
    • Security 7 08/10/15

      Log redaction is a desired feature for PII data and as a complement to encryption at rest.

      In its simplest form it could be implemented as a configuration option redactLogs orthogonal to the log level.

      • Preserve enough info in the redaction function so that CEs et al. can do useful analytics on the output. This includes for query shapes for instance. This could be achieved through hashing actual data in the queries.

      Things that could/should be redacted:
      1. query parameters (things other than field names and dollarsign operators).
      2. hostnames/IP addresses
      3. User names maybe?
      4. Namespace names maybe?
      5. Error messages in case error messages include any of the above.

            Assignee:
            backlog-server-platform DO NOT USE - Backlog - Platform Team
            Reporter:
            andreas.nilsson Andreas Nilsson
            Votes:
            0 Vote for this issue
            Watchers:
            13 Start watching this issue

              Created:
              Updated:
              Resolved: