---
title: Session Log Masking in SSH Proxy
slug: kronpam-reference-guide-3-9-0/session-log-masking-in-ssh-proxy
description: Learn how to prevent sensitive data from being displayed in logs when using SSH Proxy with this informative document. Discover how to use the nsso.cli.secret_masking_patternproperty key to define a masking pattern for sensitive information, including a sp
docTags: 
createdAt: 2022-07-27T14:05:02.000Z
---

In some of the usage scenarios of SSH Proxy, sensitive data can be used in the commands on the connected device. If it is necessary to hide such sensitive data from the logs, the **nsso.cli.secret\_masking\_pattern** property key must be defined on the corresponding element type. Part of the command that would contain sensitive data should be written as **$$value$$** at the property key with regular expression.

**Property key definition**:

`nsso.cli.secret_masking_pattern = sshpass -v -p "$$value$$" ssh .*`

**CLI Input:**

`sshpass -v -p "Password1" ssh JohnDoe@192.168.1.1`

**Session and Command Log lines at Kron PAM:**

`sshpass -v -p "*****" ssh JohnDoe@192.168.1.1`