Skip to main content
Solved

Custom Pipeline Function Needed For Masking Only Capture Groups In Regex

  • April 8, 2026
  • 1 reply
  • 4 views
K
This message originated from Cribl Community Slack.
Click here to view the original link.

Anyone have success with creating custom pipeline functions? I essentially need the "Mask" function but have it ONLY mask on capture groups. We have some regexes that will match on PII, except when wrapped in special tags added by our logging library. Only the capture groups need to be masked, everything in the tags is "matched" but actually safe. I was thinking of copying and pasting the mask function and editing it but it seems to be minified, am I able to access the source for this somehow? I also saw something about being able to compile the functions to WebAssembly? The article I was reading is 8 years old at this point so I'm not sure how much has changed. https://cribl.io/blog/extending-cribl-building-custom-functions/

Best answer by Jon Rust

CFs are deprecated. You can still build them for on-prem installs, but they're a no-go int he Cloud and I don't know how much support we'd be able to give. Best to use a Code function if the built in functions don't do what you need.

1 reply

Jon Rust
Forum|alt.badge.img
  • Jon Rust
  • Employee
  • Answer
  • April 8, 2026
CFs are deprecated. You can still build them for on-prem installs, but they're a no-go int he Cloud and I don't know how much support we'd be able to give. Best to use a Code function if the built in functions don't do what you need.
Terms & ConditionsAccessibility statement