Files
git.stella-ops.org/docs/features/unchecked/telemetry/redacting-log-processor.md

1.6 KiB

Redacting Log Processor

Module

Telemetry

Status

IMPLEMENTED

Description

Log processor that redacts sensitive data from telemetry output before export.

Implementation Details

  • RedactingLogProcessor: src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/RedactingLogProcessor.cs -- OpenTelemetry LogRecordProcessor that redacts sensitive data before export
  • ILogRedactor interface: src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/ILogRedactor.cs -- redaction service interface
  • LogRedactor: src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/LogRedactor.cs -- default implementation with configurable redaction patterns
  • LogRedactionOptions: src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/LogRedactionOptions.cs -- configurable patterns, replacement text, and scope
  • DeterministicLogFormatter: src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/DeterministicLogFormatter.cs -- deterministic log formatting for reproducibility
  • Tests: src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.Tests/LogRedactorTests.cs, DeterministicLogFormatterTests.cs
  • Source: Feature matrix scan

E2E Test Plan

  • Verify log processor redacts PII patterns (emails, IPs, tokens) before export
  • Test custom redaction patterns are applied via LogRedactionOptions
  • Verify deterministic log formatter produces reproducible output
  • Test redaction preserves log structure and does not corrupt JSON output
  • Verify redaction applies to both log message and log attributes