diff --git a/docs/gateway/logging.md b/docs/gateway/logging.md index 7fe1a17d1c1..a3b47cfca8b 100644 --- a/docs/gateway/logging.md +++ b/docs/gateway/logging.md @@ -52,10 +52,11 @@ You can tune console verbosity independently via: - `logging.consoleLevel` (default `info`) - `logging.consoleStyle` (`pretty` | `compact` | `json`) -## Tool summary redaction +## Redaction -Verbose tool summaries (e.g. `🛠️ Exec: ...`) can mask sensitive tokens before they hit the -console stream. This is **tools-only** and does not alter file logs. +OpenClaw can mask sensitive tokens before log output leaves the process. The +same redaction policy is applied at console and file-log sinks, so matching +secret values are masked before JSONL lines are written to disk. - `logging.redactSensitive`: `off` | `tools` (default: `tools`) - `logging.redactPatterns`: array of regex strings (overrides defaults) diff --git a/docs/gateway/opentelemetry.md b/docs/gateway/opentelemetry.md index 7a66116218a..899c9d26451 100644 --- a/docs/gateway/opentelemetry.md +++ b/docs/gateway/opentelemetry.md @@ -147,9 +147,9 @@ When any subkey is enabled, model and tool spans get bounded, redacted - **Traces:** `diagnostics.otel.sampleRate` (root-span only, `0.0` drops all, `1.0` keeps all). - **Metrics:** `diagnostics.otel.flushIntervalMs` (minimum `1000`). -- **Logs:** OTLP logs respect `logging.level` (file log level). Console - redaction does **not** apply to OTLP logs. High-volume installs should - prefer OTLP collector sampling/filtering over local sampling. +- **Logs:** OTLP logs respect `logging.level` (file log level). They use the + diagnostic log-record redaction path, not console formatting. High-volume + installs should prefer OTLP collector sampling/filtering over local sampling. ## Exported metrics