question Re: How do I use ReplaceText processor to mask a portion of all the IP addresses found in a multi-line input FlowFile's content in Archives of Support Questions (Read Only)

How do I use ReplaceText processor to mask a portion of all the IP addresses found in a multi-line input FlowFile's content

MattWho — Fri, 17 Feb 2017 01:03:49 GMT

Hello,

We have a requirement to anonymize IP address. So we would identify IP address and replace the last part with some arbitrary value.

We have tried using the following regex for that (with "Regex Replace" for replacement strategy, "Line-by-Line" as evaluation mode)

(1) \\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}

(2) ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$

(3) ((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)

None of this works.

Can you help me with the right value of regex we can use and the replacement value as well.

Thank you in advance!

Re: How do I use ReplaceText processor to mask a portion of all the IP addresses found in a multi-line input FlowFile's content

MattWho — Fri, 17 Feb 2017 01:06:22 GMT

@Anshuman Ghosh I posted your question here for you.

Re: How do I use ReplaceText processor to mask a portion of all the IP addresses found in a multi-line input FlowFile's content

Wynner — Mon, 19 Aug 2019 11:24:57 GMT

Try this with a ReplaceText processor:

Here is the complete Search Value property:

((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)).((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)).((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)).((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?))

@anshuman Ghosh

Re: How do I use ReplaceText processor to mask a portion of all the IP addresses found in a multi-line input FlowFile's content

MattWho — Fri, 17 Feb 2017 01:11:34 GMT

@Anshuman Ghosh

The Search Value Regex above has 4 capture groups from a valid IP address. Each capture group can then be referenced in the replacement Value as $1, $2, $3, and/or $4. In the example above the replacement for each found valid IP is still the first two numbers followed by ".x.x". You can of course change the replacement value to whatever meets your specific needs.

Thanks,

Matt