---
title: Sensitive Session Log Control in SSH Proxy
slug: kronpam-legacy-ui-reference-guide-3-5-0/sensitive-session-log-control-in-ssh-proxy
description: Learn how to prevent sensitive data from being displayed in logs when using SSH Proxy with this informative document. Discover how to use the nsso.cli.secret_masking_patternproperty key to define a masking pattern for sensitive information, including a sp
docTags: 
createdAt: 2022-07-27T14:05:02.000Z
---

In some of the usage scenarios of SSH Proxy, sensitive data can be used in the command on the connected device. It is possible that this sensitive data used is not want to be displayed openly in logs. In the case of thensso.cli.secret\_masking\_patternproperty key must be defined on the corresponding element type. The definition should have a precise form. For example, the part of this command that contains the sensitive information can be defined as $$value$$ at the property key with regular expression.

***Property key definition***:

nsso.cli.secret\_masking\_pattern= sshpass -v -p "$$value$$" ssh .\*

***CLI Input:***

sshpass -v -p "Password1" ssh [JohnDoe@192.168.1.1](#)

***Session and Command Log lines at ******Kron PAM:***

sshpass -v -p "\*\*\*\*\*" ssh JohnDoe\@192.168.1.1