https://community.dynatrace.com/t5/Log-Analytics/Log-processing-rule-for-masking-an-email-within-a-json-object/m-p/275992#M1301 <P>Two things per the <A href="https://docs.dynatrace.com/docs/analyze-explore-automate/logs/methods-of-masking-sensitive-data#mask-logs-ingest" target="_self">documentation</A>:<BR />1.&nbsp;<SPAN>Whenever the content or any other attribute is to be changed, it has to be declared as&nbsp;</SPAN>INOUT<SPAN>&nbsp;(writable) with the&nbsp;</SPAN>USING<SPAN>&nbsp;command.</SPAN></P><P>2. When replacing, the input and output fields need to be the same. For instance, if you're modifying 'content', then your FIELDS_ADD command should add a&nbsp; field called 'content' instead of 'modified_content'. This way the newly formed field replaces what was there before.</P> Fri, 25 Apr 2025 20:03:52 GMT marco_irmer 2025-04-25T20:03:52Z https://community.dynatrace.com/t5/Log-Analytics/Log-processing-rule-for-masking-an-email-within-a-json-object/m-p/275981#M1300 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="zahrakhan_0-1745595463017.png" style="width: 400px;"><img src="https://community.dynatrace.com/t5/image/serverpage/image-id/27730i3509BA99B44453A0/image-size/medium?v=v2&amp;px=400" role="button" title="zahrakhan_0-1745595463017.png" alt="zahrakhan_0-1745595463017.png" /></span></P> <P>Here is my log processing rule. Can anyone tell me what I am doing wrong? <BR />I am really struggling to get this to work. I have stripped down my actual JSON object a lot, but I can't get it to work.&nbsp;</P> Fri, 09 May 2025 15:03:59 GMT https://community.dynatrace.com/t5/Log-Analytics/Log-processing-rule-for-masking-an-email-within-a-json-object/m-p/275981#M1300 zahra-khan 2025-05-09T15:03:59Z https://community.dynatrace.com/t5/Log-Analytics/Log-processing-rule-for-masking-an-email-within-a-json-object/m-p/275992#M1301 <P>Two things per the <A href="https://docs.dynatrace.com/docs/analyze-explore-automate/logs/methods-of-masking-sensitive-data#mask-logs-ingest" target="_self">documentation</A>:<BR />1.&nbsp;<SPAN>Whenever the content or any other attribute is to be changed, it has to be declared as&nbsp;</SPAN>INOUT<SPAN>&nbsp;(writable) with the&nbsp;</SPAN>USING<SPAN>&nbsp;command.</SPAN></P><P>2. When replacing, the input and output fields need to be the same. For instance, if you're modifying 'content', then your FIELDS_ADD command should add a&nbsp; field called 'content' instead of 'modified_content'. This way the newly formed field replaces what was there before.</P> Fri, 25 Apr 2025 20:03:52 GMT https://community.dynatrace.com/t5/Log-Analytics/Log-processing-rule-for-masking-an-email-within-a-json-object/m-p/275992#M1301 marco_irmer 2025-04-25T20:03:52Z