This feature allows you to obscure data before sending it as part of the analytics payload.
With this feature, Apigee uses SHA512 to hash the original value before sending data from the runtime
plane to the control plane.
You can set the salt value for the hash with the
axHashSalt
property in the overrides.yaml file. The axHashSalt property specifies a
value used as a salt when computing SHA512 hashes to obfuscate sensitive analytics data. Apigee
recommends using the same value across different clusters that host the same Apigee organization.
Apply the value with the apigee-org chart with the following command:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-10 UTC."],[[["This feature allows for the obfuscation of sensitive analytics data in Apigee hybrid versions 1.2 and newer by hashing specific fields using SHA512 before sending it from the runtime plane to the control plane."],["The `axHashSalt` property in the `overrides.yaml` file is used to specify the salt value for the SHA512 hash, and it's recommended to use the same value across different clusters within the same Apigee organization."],["Obfuscation can be enabled for each environment by setting `features.analytics.data.obfuscation.enabled` to `true` using a `PUT` request, however, ensure to include all properties when using the PUT request, as it overwrites the entire property set."],["With obfuscation enabled, Apigee hashes fields such as `client_ip`, `developer_email`, `request_uri`, `proxy_pathsuffix`, and others, ensuring sensitive data is protected and is reflected in analytics dashboards."],["Note that analytics reports will display unhashed data if it was communicated from the runtime plane before enabling obfuscation or after disabling the feature."]]],[]]
