Agent Trace Obfuscation
Datadog の調査レポート: サーバーレスの状態 レポート: サーバーレスの状態

Agent Trace Obfuscation

このページは英語では対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Agent trace obfuscation is disabled by default. Enable it in your datadog.yaml configuration file to obfuscate all information attached to your traces.

Currently this options only works with the following services:

  • mongodb
  • elasticsearch
  • redis
  • memcached
  • http
  • remove_stack_traces

Applies to spans of type mongodb, more specifically: to the mongodb.query span tags.

apm_config:
  enabled: true

  ## (...)

  obfuscation:
    mongodb:
      enabled: true
      keep_values:
        - uid
        - cat_id
  • keep_values - defines a set of keys to exclude from Agent trace obfuscation.

Applies to spans of type elasticsearch, more specifically, to the elasticsearch.body span tags:

apm_config:
  enabled: true

  ## (...)

  obfuscation:
    elasticsearch:
      enabled: true
      keep_values:
        - user_id
        - category_id
  • keep_values - defines a set of keys to exclude from Agent trace obfuscation.

Applies to spans of type redis, more specifically, to the redis.raw_command span tags:

apm_config:
  enabled: true

  ## (...)

  obfuscation:
    redis:
      enabled: true

Applies to spans of type memcached, more specifically, to the memcached.command span tags:

apm_config:
  enabled: true

  ## (...)

  obfuscation:
    memcached:
      enabled: true

HTTP obfuscation rules for http.url metadata in spans of type http:

apm_config:
  enabled: true

  ## (...)

  obfuscation:
    http:
      remove_query_string: true
      remove_paths_with_digits: true
  • remove_query_string: If true, obfuscates query strings in URLs.
  • remove_paths_with_digits: If true, path segments in URLs containing digits are replaced by “?”.

Set the remove_stack_traces parameter to true, to remove stack traces and replace them with ?.

apm_config:
  enabled: true

  ## (...)

  obfuscation:
    remove_stack_traces: true

On this Page