From bdfc5b3d9d93d03f1f6e0c52958aeaad5e8813e8 Mon Sep 17 00:00:00 2001
From: michel-laterman <michel.laterman@elastic.co>
Date: Thu, 5 Dec 2024 15:05:32 -0800
Subject: [PATCH] expand header matches

---
 internal/pkg/config/config.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/pkg/config/config.go b/internal/pkg/config/config.go
index afa7b5bab..69dfb8d85 100644
--- a/internal/pkg/config/config.go
+++ b/internal/pkg/config/config.go
@@ -170,7 +170,7 @@ func redactOutput(cfg *Config) Output {
 	}
 
 	for k := range redacted.Elasticsearch.Headers {
-		if strings.Contains(strings.ToLower(k), "auth") {
+		if strings.Contains(strings.ToLower(k), "auth") || strings.Contains(strings.ToLower(k), "token") || strings.Contains(strings.ToLower(k), "key") { // best-effort scan to redact sensitive headers
 			redacted.Elasticsearch.Headers[k] = kRedacted
 		}
 	}