Skip to content

log densensitation in tiflash #8977

@JaySon-Huang

Description

@JaySon-Huang

Feature Request

Is your feature request related to a problem? Please describe:

Describe the feature you'd like:

In #1277, we introduce security.redact_info_log to replace the rowkey by ? in the tiflash logging.

TiDB introduce a "marker" mode for redact pingcap/tidb#51306 since v8.1

Mark sensitive data with ‹..›. when security.redact_info_log=marker. Note that is not "less" < but U+2039. If the raw data contains , will be escaped to ‹‹, similar to . This is a new feature:

  1. TiFlash will produce logs with sensitive data marked with ‹..›
  2. Cloud or OP users could desensitive logs on their own by tidb-server sub commands or whatever.

It is basically because that users want the original log, and we (primarily tech supports) should only see desensitived logs.

Describe alternatives you've considered:

Teachability, Documentation, Adoption, Migration Strategy:

Metadata

Metadata

Assignees

Labels

type/feature-requestCategorizes issue or PR as related to a new feature.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions