# Variables containing passwords - Filtering

**URL:** <https://forum.ansible.com/t/variables-containing-passwords-filtering/15682>\
**Category:** Ansible Project\
**Created:** [July 16, 2014, 8:02am UTC](https://forum.ansible.com/t/variables-containing-passwords-filtering/15682 "2014-07-16T08:02:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Simone\_Bovi](https://avatars.discourse-cdn.com/v4/letter/s/9d8465/32.png) [@Simone\_Bovi](https://forum.ansible.com/u/Simone_Bovi)\
**Post date:** [July 16, 2014, 8:02am UTC](https://forum.ansible.com/t/variables-containing-passwords-filtering/15682/1 "2014-07-16T08:02:07Z")

</div>

Hello,  
I would like to share a feature idea: how about filtering passwords defined in variables in a way that they are never put through output or red/blue logs?

It seems that at this time is filtered only output where “password=something”, “login\_password=something” or patterns like “user:pass@foo/whatever” are found. By the way, also these features seem to not work properly.

Another solution could be to enable “no\_log=True” parameter but only few modules seem to support it.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\
**Post date:** [July 17, 2014, 12:28pm UTC](https://forum.ansible.com/t/variables-containing-passwords-filtering/15682/2 "2014-07-17T12:28:16Z")

</div>

This has been discussed about 5 times over the last 3 days 🙂

Yes, we would like to enable the “no\_log: True” attribute on a task to alter the way the callback outputs data. (or rather, the info passed to the callback should be trimmed in that case)

---

<div class="post-metadata">

**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\
**Post date:** [July 17, 2014, 12:28pm UTC](https://forum.ansible.com/t/variables-containing-passwords-filtering/15682/3 "2014-07-17T12:28:41Z")

</div>

Right now no\_log: True is controlling remote syslog, the proposal is to make it also control the data passed to callbacks.