We would like to improve the log redaction feature. It is hard to say if any of these suggestions are feasible or even desirable before we have a complete system in place running with redaction.
Some suggestions below:
- Make it more granular for certain common log locations, such as in curop.cpp. See CR: https://mongodbcr.appspot.com/83770003/ for a suggested parametrized redact function for BSON objects.
- Encrypt field values with a key stored in the database and introduce a command that can decrypt the values.
- Store a mapping between 'redacted' _id values and real _id values for index problem diagnosis.
- depends on
-
SERVER-24991 Redact streaming log messages using the 'redact' functions
- Closed