Page contents
show page contents
This enrichment replaces the end of the user’s IP address with “x”s, on a configurable length. For instance 13.54.45.87 could become 13.54.x.x.
Both IPv4 and IPv6 are supported.
This enrichment runs after IP lookup enrichment.
Configuration
The number of octets (IPv4) to anonymize is specified with anonOctets and the number of segments (IPv6) to anonymize is specified with anonSegments.
For example anonymizing one octet would change an IPv4 address of 255.255.255.255 to 255.255.255.x, and anonymizing three octets would change it to 255.x.x.x.
Input
This enrichment uses the IP of the user, that can be found in user_ipaddress field of the atomic event.
Output
The anonymized value of the IP address is updated in-place in user_ipaddress field, before ever being stored.
