This feature allows you to obscure data before sending it as part of the analytics payload.
With this feature, Apigee uses SHA512 to hash the original value before sending data from the runtime
plane to the control plane.
You can set the salt value for the hash with the
axHashSalt
property in the overrides.yaml file. The axHashSalt property specifies a
value used as a salt when computing SHA512 hashes to obfuscate sensitive analytics data. Apigee
recommends using the same value across different clusters that host the same Apigee organization.
Apply the value with the apigee-org chart with the following command:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eThis feature allows Apigee hybrid 1.2 and newer to obfuscate sensitive analytics data by hashing specific fields with SHA512 before sending it to the analytics backend.\u003c/p\u003e\n"],["\u003cp\u003eYou can set a salt value for the SHA512 hash using the \u003ccode\u003eaxHashSalt\u003c/code\u003e property in the \u003ccode\u003eoverrides.yaml\u003c/code\u003e file, and it is recommended to use the same salt across different clusters within the same Apigee organization.\u003c/p\u003e\n"],["\u003cp\u003eTo enable this data obfuscation feature, you must set \u003ccode\u003efeatures.analytics.data.obfuscation.enabled\u003c/code\u003e to \u003cstrong\u003etrue\u003c/strong\u003e for each environment via a PUT request, ensuring you include all other properties for that environment.\u003c/p\u003e\n"],["\u003cp\u003eOnce enabled, Apigee will hash a set list of fields (such as client_id, client_ip, and request_uri) and dimension values in custom reports to protect sensitive information, which will be reflected in the Apigee analytics dashboard.\u003c/p\u003e\n"],["\u003cp\u003eThe obfuscated data is displayed in the Apigee hybrid analytics dashboard, though it may take a few minutes for the hashed results to appear in the user interface, and previously unhashed data before enabling the feature will still be displayed.\u003c/p\u003e\n"]]],[],null,[]]
