Their are some sensitive APIs that are onboarded on APIM and i want no logging to be done for them due to security concerns.
Was able to get many things but none of them work and was not in the will to make custom appsinsights to be done so it just reject those logs is that the only way to not log few apis.
Have tried multiple policy both global and api level none worked till now
New contributor
Naman Jain is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
3
<code><inbound>
<base />
<choose>
<when condition="@(context.Request.OriginalUrl.Path.Contains("/specific-endpoint"))">
<set-variable name="disableLogging" value="true" />
</when>
<otherwise>
<set-variable name="disableLogging" value="false" />
</otherwise>
</choose>
<log-to-eventhub logger-id="your-eventhub-logger-id" />
<choose>
<when condition="@(context.Variables.GetValueOrDefault<bool>("disableLogging") == false)">
<!-- Include logging policy here -->
</when>
</choose>
</inbound></code>
<code><inbound>
<base />
<choose>
<when condition="@(context.Request.OriginalUrl.Path.Contains("/specific-endpoint"))">
<set-variable name="disableLogging" value="true" />
</when>
<otherwise>
<set-variable name="disableLogging" value="false" />
</otherwise>
</choose>
<log-to-eventhub logger-id="your-eventhub-logger-id" />
<choose>
<when condition="@(context.Variables.GetValueOrDefault<bool>("disableLogging") == false)">
<!-- Include logging policy here -->
</when>
</choose>
</inbound></code>
<inbound>
<base />
<choose>
<when condition="@(context.Request.OriginalUrl.Path.Contains("/specific-endpoint"))">
<set-variable name="disableLogging" value="true" />
</when>
<otherwise>
<set-variable name="disableLogging" value="false" />
</otherwise>
</choose>
<log-to-eventhub logger-id="your-eventhub-logger-id" />
<choose>
<when condition="@(context.Variables.GetValueOrDefault<bool>("disableLogging") == false)">
<!-- Include logging policy here -->
</when>
</choose>
</inbound>APIM policies allow you to define how your APIs are processed. You can use policies to enable or disable logging dynamically. Here’s an example of how you can control logging with policies:
- Go to your API in the APIM portal.
- Select the Design tab.
- Choose the operation you want to configure or apply a policy at the API level if it’s for multiple operations.
- Select Inbound processing or Outbound processing, depending on where you want to apply the policy.
- To disable logging for specific endpoints, you would typically use a conditional policy expression. For example:
1