Files
VictoriaMetrics/app/vmagent
JAYICE 776a40fe06 app/vmagent: add -remoteWrite.obfuscateLabels flag for hiding sensitive label values (#10813)
Add support for obfuscating label values before sending metrics to
remote storage (`-remoteWrite.url`). The new
`-remoteWrite.obfuscateLabels` flag accepts a list of label names
(separated by `^^`) whose values are replaced with their SHA-256 hex
digest. No salt is applied, so values with a small or predictable value
space can potentially be recovered by brute force.

This feature pairs well with [Monitoring Data eXchange
(MDX)](https://docs.victoriametrics.com/victoriametrics/vmagent/#monitoring-data-exchange):
use `-remoteWrite.mdx.enable=true` to forward only VictoriaMetrics
self-monitoring metrics to an external vendor while hiding sensitive
label values with `-remoteWrite.obfuscateLabels`.

Fixes https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10599
PR https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10813

---------

Signed-off-by: “Jayice” <jzhou@victoriametrics.com>
Co-authored-by: Max Kotliar <mkotlyar@victoriametrics.com>
Co-authored-by: f41gh7 <nik@victoriametrics.com>
2026-07-28 16:26:26 +03:00
..
2026-07-01 18:01:33 +03:00
2020-02-25 00:09:18 +02:00

See vmagent docs here.

vmagent docs can be edited at docs/vmagent.md.