Is there a way to hide XPaths from ConfD audit commit logs?

General
1

Hi everyone,

I’ve enabled /confdConfig/logs/auditLog and /confdConfig/logs/auditLogCommit to export all configuration commit changes to a remote syslog server.

However, I noticed that auditLogCommit entries include full XPaths in lines like:

commit thandle <N> <path> set to '<value>'
commit thandle <N> <path> created
commit thandle <N> <path> deleted
...

Is there a way to hide or remove the <path> information from these logs?

The reason I’m asking is that our application uses transforms, hooks, and hidden nodes, and exposing those internal paths in logs might confuse or leak internal logic to end users.

Any suggestions or configuration options to sanitize or restrict these log entries would be very helpful!

Thanks in advance!

2

Hi,

Given your experience with transforms, hooks, etc, you could probably easily implement was is described in the User Guide in 16.3. Syslog Messages to customize the content to send only what you want to expose.

Best,
Scott

3

Thank you!

I’m currently evaluating whether this can be easily implemented in our application, and whether it’s truly possible to customize it the way we need.

I’ll be back soon with updates or any further questions.

Best regards,
Ittalo