Sensitive data masking

marusla — Sun, 19 Oct 2025 12:27:37 GMT

Hello, can someone helpme, please, im trying to create an Search expression for hide some fields, like passport, id, an only showme the last 4 digit, can you helpme im trying with (.{4}) but this hide only the first 4 digit, but i want that showme the last 4

Here an examble of my log

Id/:124241244, Passport/:34455009986665

I want masking the number an show only de last 4 digit like:

Id/:*1244, Passport/:*6665

Re: Sensitive data masking

juan_mesa — Wed, 22 Oct 2025 23:09:05 GMT

Hi Marusla,

Dynatrace’s sensitive data masking feature uses a simplified regular expression engine that doesn’t support advanced constructs such as lookaheads, lookbehinds, or backreferences those would help us to achieve the outcome you are desiring. Only standard expressions are supported — for example, you can safely mask entire numeric fields using a pattern such as:

(?:Id/:|Passport/:)(\d+)

This will replace the full number according the format you use for data masking type, in the example below I use the string format.

I believe that if you need to keep the last four digits visible, the masking must be applied before logs are sent to Dynatrace.

Hope this helps,

Best regards

https://docs.dynatrace.com/docs/shortlink/lma-mask-sensitive-data#unsupported-regular-expressions

topic Sensitive data masking in Open Q&A

Sensitive data masking

Re: Sensitive data masking