v.22.11Improvement
Mask sensitive data in query logs and error messages
Mask passwords and secret keys both insystem.query_logand/var/log/clickhouse-server/*.logand also in error messages. #42484 (Vitaly Baranov).
Why it matters
This feature enhances security by automatically hiding sensitive information such as passwords and secret keys from query logs, server logs, and error outputs. It helps prevent accidental leaks of confidential credentials during query execution and logging.How to use it
The masking is applied automatically by the system to relevant fields in thesystem.query_log, all /var/log/clickhouse-server/*.log files, and error messages without requiring user intervention or configuration.