opensearch-project / opensearch-project/data-prepper
Lower log level in messages that contain sensitive information
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 374
- Forks
- 354
- Avg merge
- 3d 18h
- Merged PRs (30d)
- 8
Description
Is your feature request related to a problem? Please describe.
Currently, there are several places within the dataprepper codebase where error logs contain sensitive information. It would be nice to downgrade some of these to WARN or INFO so that error logs can be used by third parties for debugging if neccessary.
Describe the solution you'd like
Go through the codebase and lower the log level of any error messages that contain sensitive information inside the message.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the Data Prepper codebase for error log messages that include sensitive information, since the issue does not identify specific files or tests. Determine which messages should be WARN or INFO, then verify that the affected logging behavior no longer exposes sensitive details at error level.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- observability, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100