observability
7 Dtwo policies tagged "observability", including Block SPL Commands That Write or Send Data, Bound the Time Range of Splunk Searches. Browse by what the control does rather than which app it targets.
On this page
Datadog
Cap the Time Window of Datadog SearchesKeeps Datadog searches to a recent window. The agent can search logs, spans, RUM, and events as much as it likes, but each call looks back at most 7 days .Datadog Read-Only Except NotebooksKeeps Datadog read-only for the agent, with one exception: it can create and edit notebooks.Datadog: Redact Secrets and Emails from ResponsesLogs are where secrets actually leak: a debug line that prints a request header, a stack trace with a connection string, a config dump at startup.
Onboarding starters
Splunk
Block SPL Commands That Write or Send DataMost people assume a Splunk search can only read.Bound the Time Range of Splunk SearchesMakes sure every Splunk search the agent runs has a bounded time range.Splunk: Redact Secrets and Emails from ResponsesLogs are where secrets actually leak: a debug line that prints a request header, a stack trace with a connection string, a config dump at startup.