# MaskingOperator

**Type**: `object`

## Properties

- name: attributeMasks (required)
  type: array of `AttributeMask`
  description: Masks to apply to attribute values. Each entry names an attribute path (as a list of segments) and the masks to apply to the value at that path. Only string values at the exact path are masked; missing or non-string attributes are skipped. Paths must be unique. The same matching rules as messageMasks apply.

- name: messageMasks (required)
  type: object
  description: Masks to apply to the log message, as a map of label to mask. A mask may be written as a bare regex string, in which case each match is replaced with the label in square brackets — a match of the regex labeled "email" becomes "[email]". Labels may be up to 64 characters. Overlapping matches resolve to the leftmost match first, then the longest; declaration order breaks remaining ties, so declare more specific patterns first.

- name: name (required)
  type: string

- name: predicate (optional)
  type: `EventPredicate`

- name: type (required)
  type: enum: `masking-operator`
  description: Masks sensitive substrings in log events by replacing regex matches with decorated labels.