SAS Technical Support provides the PII Log Redactor to help remove sensitive information from SAS log files before they are shared. The utility uses regex-based deterministic tokenization to identify sensitive values and replace them with consistent, repeatable tokens, masking the data while preserving the overall log structure needed for troubleshooting.

The PII Log Redactor masks common values, including email addresses, IP addresses, UUIDs and session IDs, user names and user identifiers, process IDs, and host names inside URLs. CASLIB names are intentionally preserved to support CAS-related troubleshooting.

The PII Log Redactor supports .log, .txt, .json, and .csv files and runs on the Python standard library only (no extra dependencies). It uses a configurable salt, so the same input always produces the same redacted token.

Consider using the PII Log Redactor before sharing logs in scenarios similar to the following:

• logs that contain user names or user identifiers
• logs that contain email addresses
• logs that contain IP addresses or host names
• logs being attached to support cases
• logs being shared with engineering teams
• logs being posted in collaboration channels or internal discussions

The utility is publicly available at https://github.com/sassoftware/pii-log-redactor. Review the README for installation, usage examples, and configuration details. 

Important: Because the tool is regex-based, it reduces but cannot guarantee removal of every PII value, so always review the redacted output before sharing.