This feature allows you to obscure data before sending it as part of the analytics payload.
With this feature, Apigee uses SHA512 to hash the original value before sending data from the runtime
plane to the control plane.
You can set the salt value for the hash with the
axHashSalt
property in the overrides.yaml file. The axHashSalt property specifies a
value used as a salt when computing SHA512 hashes to obfuscate sensitive analytics data. Apigee
recommends using the same value across different clusters that host the same Apigee organization.
Apply the value with the apigee-org chart with the following command:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-10 UTC."],[[["This feature allows Apigee hybrid 1.2 and newer to obfuscate sensitive analytics data by hashing specific fields with SHA512 before sending it to the analytics backend."],["You can set a salt value for the SHA512 hash using the `axHashSalt` property in the `overrides.yaml` file, and it is recommended to use the same salt across different clusters within the same Apigee organization."],["To enable this data obfuscation feature, you must set `features.analytics.data.obfuscation.enabled` to **true** for each environment via a PUT request, ensuring you include all other properties for that environment."],["Once enabled, Apigee will hash a set list of fields (such as client\\_id, client\\_ip, and request\\_uri) and dimension values in custom reports to protect sensitive information, which will be reflected in the Apigee analytics dashboard."],["The obfuscated data is displayed in the Apigee hybrid analytics dashboard, though it may take a few minutes for the hashed results to appear in the user interface, and previously unhashed data before enabling the feature will still be displayed."]]],[]]
