diff --git a/source/includes/options-conf.yaml b/source/includes/options-conf.yaml index 4989c8649b4..62e40f91c77 100644 --- a/source/includes/options-conf.yaml +++ b/source/includes/options-conf.yaml @@ -1762,7 +1762,7 @@ inherit: program: mongod file: options-mongod.yaml replacement: - program: :program:`mongod` + program: ":program:`mongod` or :program:`mongos`" --- program: conf name: security.ldap.servers diff --git a/source/includes/options-mongod.yaml b/source/includes/options-mongod.yaml index 3bc58cd4a7d..f984ece8262 100644 --- a/source/includes/options-mongod.yaml +++ b/source/includes/options-mongod.yaml @@ -2136,20 +2136,27 @@ description: | ` to assist compliance with regulatory requirements. - For example, a {{program}} might store Personally Identifiable Information - (PII) in one or more collections. The {{program}} logs events related to CRUD - operations, sharding metadata, or replication information. It is possible - that the {{program}} may expose PII as a part of these logging operations. - A {{program}} running with {{role}} removes any message accompanying - these events before being output to the log, effectively removing the PII. - - Diagnostics on a {{mongod}} running with {{role}} may be more difficult + For example, a MongoDB deployment might store Personally Identifiable + Information (PII) in one or more collections. The {{program}} logs events + such as those related to CRUD operations, sharding metadata, etc. It is + possible that the {{program}} may expose PII as a part of these logging + operations. A {{program}} running with {{role}} removes any message + accompanying these events before being output to the log, effectively + removing the PII. + + Diagnostics on a {{program}} running with {{role}} may be more difficult due to the lack of data related to a log event. See the :ref:`process logging ` manual page for an example of the effect of {{role}} on log output. - You can toggle {{role}} on or off using :dbcommand:`setParameter` during - runtime. + You can enable or disable log redaction on a running {{program}} + using the :dbcommand:`setParameter` database command. + + .. code-block:: javascript + + db.getSiblingDB("admin").runCommand( + { setParameter: { redactClientLogData : "true | false" } } + ) --- program: mongod name: ldapServers diff --git a/source/includes/options-mongos.yaml b/source/includes/options-mongos.yaml index affcba5eb71..e7ea11ff1f3 100644 --- a/source/includes/options-mongos.yaml +++ b/source/includes/options-mongos.yaml @@ -494,4 +494,13 @@ inherit: name: ldapUserToDNMapping program: mongod file: options-mongod.yaml +--- +program: mongos +name: redactClientLogData +args: null +directive: option +inherit: + name: redactClientLogData + program: mongod + file: options-mongod.yaml ... diff --git a/source/reference/program/mongos.txt b/source/reference/program/mongos.txt index 08f1f2f7d14..c9df197f46b 100644 --- a/source/reference/program/mongos.txt +++ b/source/reference/program/mongos.txt @@ -66,6 +66,8 @@ Core Options .. include:: /includes/option/option-mongos-logappend.rst +.. include:: /includes/option/option-mongos-redactClientLogData.rst + .. include:: /includes/option/option-mongos-timeStampFormat.rst .. include:: /includes/option/option-mongos-pidfilepath.rst