Running AHFCTL Commands to Sanitize Sensitive Information and Reverse Map Sanitized Elements

ahftcl redact

Use the ahftcl redact command to sanitize sensitive data in regular files, zip files and directories.

Syntax

Note:

• The ahftcl redact command is not supported on Microsoft Windows.
• Automatic Service Request Data Collections are not redacted.

ahfctl redact 
[-h] 
[-i I] 
[-o O] 
[-m {mask,sanitize}] [-l {system,database,userdata,all} [{system,database,userdata,all} ...]]

Usage

ahfctl redact -i file_name -o out_dir -m mask

ahfctl redact -i dir_name -m sanitize -l system database

Parameters

ahfctl redact Command Parameters

Parameter	Description
-i I	Redacts the specified file or directory. Specify a regular file, zip file, or directory. Works with targets in the working directory or full path to the target.
-o O	Full path to output directory (If not specified, then defaults to in-place redaction)
-m {mask,sanitize}	Specify a redaction mode. Redaction modes: mask: Replaces the entity instance with asterisk, for example, 'hrdb' with '****' sanitize: (Default) Replaces the entity instance with substitution map value, for example, 'PDB1' with '2zq2'.
-l {system, database, userdata, all} [{system, database, userdata, all} ...]	Redact only the subset of entities based on the level specified. system: hostname, IP address, port, username database: dbname, tbsname, svcname, sqlstmt userdata: userdata in block and redo dumps all: (Default) All levels

Example Redacting a regular file

ahfctl redact -i stbm000004-vm15.tfa_Thu_Jul_22_13_24_56_UTC_2021.zip.txt -m mask

AHF is redacting

/opt/oracle.ahf/data/repository/testcollection/stbm000004-vm15.tfa_Thu_Jul_22_13_24_56_UTC_2021.zip.txt

Successfully redacted file

/opt/oracle.ahf/data/repository/testcollection/owlo000004-vm15.tfa_Thu_Jul_56_53_62_13_UTC_2021.zip.txt

Example Redacting a zip file

ahfctl redact -i testzip.zip -o dirtest -l system database

AHF is redacting /opt/oracle.ahf/data/repository/testcollection/testzip.zip

Successfully redacted zip

/opt/oracle.ahf/data/repository/testcollection/dirtest/redacted_testzip.zip

Example Redacting a directory

ahfctl redact -i test -m mask -l system userdata

AHF is redacting /opt/oracle.ahf/data/repository/testcollection/test

Successfully redacted dir /opt/oracle.ahf/data/repository/testcollection/test

ahftcl rmap

Use the ahfctl rmap command to reverse map the elements sanitized using Oracle Trace File Analyzer and Oracle Orachk.

Syntax

Note:

The ahftcl rmap command is not supported on Microsoft Windows.

ahfctl rmap 
[-h] 
[-l L [L ...]] 
[-all]

Usage

ahfctl rmap -all

ahfctl rmap -l string1 string2 string3

Parameters

ahfctl rmap Command Parameters

Parameter	Description
-l L [L ...]	List of substituted strings, for example, string1 string2 string3...
-all	(Default) Prints all original strings from the substituted stored strings.

Example ahfctl rmap

Copyahfctl rmap -l yudaqpec dwootq 49_57_77_95
________________________________________________________________________________
|  Entity Type   |   Substituted Entity Name    |     Original Entity Name     |
________________________________________________________________________________
|    username    |           yudaqpec           |           barumuga           |
|    username    |            dwootq            |            emcadm            |
|      IPV4      |         49_57_77_95          |         16_11_47_46          |
________________________________________________________________________________