How to control what gets published and how to avoid Personal Identifiable Info (PII) is logged

[rthadanicuda]

Ignore this this is an internal wrapper

[BrunoBonacci]

Hi,

If at some you record in mulog some Personal Identifiable Information and you want to anonymise it (or delete it) before it gets published to an external system you can add a Custom transformations on the publisher.

All the build-in publishers support custom transformation functions which can be specified in the publisher configuration with the :transform key.
The transformation function is a function that takes a sequence of events and returns a potentially modified sequence of events.

transform -> event-seq -> event-seq

So, for example if somewhere in your code you logging the :email of a user and you want to remove it (or anonymise it) before it gets published, then you can proceed as following:

(u/start-publisher!
  {:type :console
   :pretty? true
   :transform (partial map #(dissoc % :email))})

In a similar way you could anonymise it, or replace the :email with an :account-id for example.
I hope this is useful