{"id":16781,"date":"2024-01-04T17:29:49","date_gmt":"2024-01-04T22:29:49","guid":{"rendered":"https:\/\/www.iri.com\/blog\/?p=16781"},"modified":"2026-11-06T16:08:33","modified_gmt":"2026-11-06T21:08:33","slug":"finding-and-masking-nosql-dbs-with-the-darkshield-gui","status":"publish","type":"post","link":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/","title":{"rendered":"Masking NoSQL DB PII in the DarkShield GUI"},"content":{"rendered":"<p><em>This article explains how to use <a href=\"https:\/\/www.iri.com\/products\/darkshield\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">IRI DarkShield<\/a> to find and mask personally identifiable information (PII) and other sensitive data in NoSQL databases.<\/em><\/p>\n<h2 data-pm-slice=\"1 1 []\">Introduction<\/h2>\n<p>IRI DarkShield provides purpose-built wizards in the <a href=\"https:\/\/www.iri.com\/products\/workbench\/darkshield-gui\">IRI Workbench<\/a> integrated development environment (IDE) for searching, classifying, and masking sensitive information. These capabilities apply to structured, semi-structured, and unstructured data in files, NoSQL databases, and relational database sources.<\/p>\n<p>This article demonstrates how to use the DarkShield graphical interface (GUI) to find and mask sensitive data in three NoSQL database systems:<\/p>\n<ul>\n<li>Apache Cassandra<\/li>\n<li>Elasticsearch<\/li>\n<li>MongoDB<\/li>\n<\/ul>\n<p>DarkShield Version 7 also provides GUI support for <a href=\"https:\/\/www.iri.com\/blog\/data-protection\/masking-pii-in-splunk-redis-cosmosdb\/\">Cosmos DB, Redis, and Splunk<\/a>. In addition, the DarkShield API can support other NoSQL databases through custom calling programs, as demonstrated in the GitHub repository referenced in the <a href=\"https:\/\/github.com\/TeamIRI\/darkshield-api-demos\">original article<\/a>.<\/p>\n<p data-pm-slice=\"1 1 []\">The following architecture diagram illustrates DarkShield&#8217;s components within the broader IRI Voracity data management platform. The NoSQL wizard described here operates within IRI Workbench.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-19704\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Version-7-671x1024.png\" alt=\"Diagram of IRI DarkShield Version 7 architecture showing GUI interfaces, task spaces, transfer protocols, REST API engines, and audit logs.\" width=\"522\" height=\"796\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Version-7.png 671w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Version-7-197x300.png 197w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Version-7-768x1172.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Version-7-1006x1536.png 1006w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Version-7-1342x2048.png 1342w\" sizes=\"(max-width: 522px) 100vw, 522px\" \/><\/p>\n<p data-pm-slice=\"1 3 []\">Although this article focuses on NoSQL databases, DarkShield also provides other IRI Workbench wizards, including:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-pii-in-files-with-the-darkshield-files-wizard\/\"><strong>New File Search\/Masking Job<\/strong><\/a>, for discovering and protecting sensitive information in files.<\/li>\n<li><a href=\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-pii-in-relational-databases-with-the-darkshield-rdb-wizard\/\"><strong>New Relational DB Search\/Masking Job<\/strong><\/a>, for discovering and masking semi-structured or unstructured sensitive data stored in relational database (RDB) columns.<\/li>\n<\/ul>\n<p data-pm-slice=\"1 1 []\">These wizards provide different ways to configure DarkShield jobs according to the data source being processed.<\/p>\n<h2 data-pm-slice=\"1 1 []\">What the DarkShield NoSQL DB Wizard Does<\/h2>\n<p>The <strong>New NoSQL DB Search\/Masking Job<\/strong> wizard in the IRI Workbench <a href=\"https:\/\/www.iri.com\/products\/workbench\/darkshield-gui\">GUI for DarkShield<\/a> helps users configure jobs to find and mask PII or other sensitive information in MongoDB, Cassandra, and Elasticsearch.\u00a0The wizard produces an XML-based DarkShield job configuration file with the <code dir=\"ltr\">.dsc<\/code> extension. This file contains the Search Contexts and Mask Contexts used to define the job.<\/p>\n<ul>\n<li data-pm-slice=\"1 1 []\"><strong>Search Contexts<\/strong> specify how DarkShield accesses the NoSQL source and scans its contents for sensitive information.<\/li>\n<li><strong>Mask Contexts<\/strong> specify how the discovered sensitive information should be de-identified and how DarkShield accesses the target NoSQL database where the masked data will be written.<\/li>\n<\/ul>\n<h3 data-pm-slice=\"1 1 []\">Data Classes and Search Matchers<\/h3>\n<p>DarkShield uses predefined <a href=\"https:\/\/www.iri.com\/blog\/data-protection\/iri-data-classification\/\">Data Classes<\/a> to identify sensitive information during scanning and masking operations.\u00a0These Data Classes are stored in the <strong>IRI Data Class and Rule Library<\/strong>. Each Data Class contains one or more Search Matchers, which define the methods used to recognize particular kinds of PII.<\/p>\n<p>Earlier versions of the NoSQL wizard supported searching for sensitive values through Java regular expressions (RegEx) and Set File lookups. The wizard described here supports additional search methods, along with masking operations that can run separately or together with discovery.<\/p>\n<p>For more information about the available methods, read about <a href=\"https:\/\/www.iri.com\/blog\/data-protection\/data-matchers\/\"><span style=\"font-weight: 400;\">Data Matchers<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/www.iri.com\/blog\/data-protection\/location-matchers\/\"><span style=\"font-weight: 400;\">Location Matchers<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p>These resources explain how DarkShield identifies sensitive information using configured matching methods.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Prerequisites for Using the DarkShield NoSQL Wizard<\/h2>\n<p>Before creating a NoSQL search or masking job, complete the following preliminary steps.<\/p>\n<h3>1. Configure the DarkShield API Preferences<\/h3>\n<p>First, verify that the DarkShield API distribution directory is specified in the IRI Workbench preferences.<\/p>\n<p>Navigate to: <i><span style=\"font-weight: 400;\">\u00a0<\/span><\/i><span style=\"font-weight: 400;\"><strong>IRI Workbench\u00a0<\/strong><\/span><i><img loading=\"lazy\" decoding=\"async\" class=\"\" title=\"\" src=\"https:\/\/lh7-us.googleusercontent.com\/EsAVRtz-Vpc3n6dqewAx-kV_tUuKE4c0rOFWczpPwvY3RRblIamjM0RI-m0dJvHUBWKK8tndtrc_MAfihmLCDjLDhcZD_TN0Rv97ZWM7Wh2lkWMJB2ihM2VRw5iiVltOqrbZ1BycudA5_ca-B2GhX0w\" alt=\"\" width=\"30\" height=\"29\" \/><\/i><strong>R<\/strong><strong>eferences &gt; IRI &gt; DarkShield<\/strong><\/p>\n<p>Here, you can configure the DarkShield GUI and API preferences, including the host, port, and location of the DarkShield API distribution.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16927\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-GUI-and-API-preferences-1-300x235.png\" alt=\"IRI Workbench DarkShield preferences showing API distribution directory, server host, port, and GUI configuration options.\" width=\"648\" height=\"508\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-GUI-and-API-preferences-1-300x235.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-GUI-and-API-preferences-1-768x601.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-GUI-and-API-preferences-1.png 805w\" sizes=\"(max-width: 648px) 100vw, 648px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">Confirm these settings before proceeding with the wizard.<\/p>\n<h3>2. Create or Verify the IRI Data Class and Rule Library<\/h3>\n<p>All DarkShield wizards require an IRI project containing an <strong>IRI Data Class and Rule Library<\/strong>.\u00a0The library must contain at least one Data Class and a masking Rule assigned to that Data Class.<\/p>\n<p>Data Classes define the sensitive information to search for, while masking Rules specify how matching information should be transformed.<span style=\"font-weight: 400;\">\u00a0To learn about the IRI Data Class and Rule Library and how to create Data Classes and Rules, read this <\/span><a href=\"https:\/\/www.iri.com\/blog\/data-protection\/iri-data-classification\/\"><span style=\"font-weight: 400;\">article<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p data-pm-slice=\"1 1 []\">The following screenshot shows an IRI project containing its associated library.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16928 size-full\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/IRI-Project-containing-IRI-Library.png\" alt=\"IRI Workbench Project Explorer showing a NoSQL project containing an IRI Data Class and Rule Library file.\" width=\"159\" height=\"107\" \/><\/p>\n<p style=\"text-align: center;\"><i><span style=\"font-weight: 400;\">IRI Project containing IRI Library<\/span><\/i><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16929\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/IRI-Data-Class-and-Rules-Library-Form-Editor-1-300x87.png\" alt=\"IRI Workbench library editor displaying available Data Classes and masking rules for sensitive data discovery.\" width=\"834\" height=\"242\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/IRI-Data-Class-and-Rules-Library-Form-Editor-1-300x87.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/IRI-Data-Class-and-Rules-Library-Form-Editor-1-1024x296.png 1024w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/IRI-Data-Class-and-Rules-Library-Form-Editor-1-768x222.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/IRI-Data-Class-and-Rules-Library-Form-Editor-1.png 1053w\" sizes=\"(max-width: 834px) 100vw, 834px\" \/><\/p>\n<p style=\"text-align: center;\"><i><span style=\"font-weight: 400;\">IRI Data Class and Rules Library Form Editor contains some Data Classes and Rules<\/span><\/i><\/p>\n<h3 data-pm-slice=\"1 1 []\">3. Verify That the DarkShield API Server Is Running<\/h3>\n<p>Next, confirm that the <strong>Plankton (DarkShield API) server<\/strong> is running.\u00a0Open the <strong>DarkShield API Status<\/strong> view in IRI Workbench. This panel displays information about the API server, including its current running status.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16930\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-API-Status-view-panel-1-300x116.png\" alt=\"DarkShield API Status panel in IRI Workbench showing server host, port, HTTPS status, and running status.\" width=\"667\" height=\"258\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-API-Status-view-panel-1-300x116.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-API-Status-view-panel-1-768x296.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-API-Status-view-panel-1.png 775w\" sizes=\"(max-width: 667px) 100vw, 667px\" \/><\/p>\n<p style=\"text-align: center;\"><i><span style=\"font-weight: 400;\">DarkShield API Status view panel<\/span><\/i><\/p>\n<p data-pm-slice=\"1 1 []\">Verifying the API status helps establish that the required DarkShield service is available before the job is executed.<\/p>\n<h3>4. Verify NoSQL Database Connectivity<\/h3>\n<p>Finally, ensure that the DarkShield application can access the source and target NoSQL data silos.\u00a0Different NoSQL database systems use different software development kits (SDKs) to establish connections and perform create, read, update, and delete (CRUD) operations.\u00a0Consequently, Cassandra, Elasticsearch, MongoDB, and other NoSQL systems may require different connection parameters, credentials, and access specifications.<\/p>\n<p>For the demonstration in this article, the source is a MongoDB database named <strong>Darkshield<\/strong>, containing a collection named <strong>data<\/strong>.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16932\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/View-of-data-collection-from-MongoDB-Compass-300x109.png\" alt=\"MongoDB Compass displaying the Darkshield database and its data collection containing sample records.\" width=\"925\" height=\"336\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/View-of-data-collection-from-MongoDB-Compass-300x109.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/View-of-data-collection-from-MongoDB-Compass-768x279.png 768w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/View-of-data-collection-from-MongoDB-Compass.png 781w\" sizes=\"(max-width: 925px) 100vw, 925px\" \/><\/p>\n<p style=\"text-align: center;\"><i><span style=\"font-weight: 400;\">View of data collection from MongoDB Compass<\/span><\/i><\/p>\n<p data-pm-slice=\"1 1 []\">This collection will be used to demonstrate the search and masking workflow.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Using the DarkShield NoSQL DB Search\/Masking Wizard<\/h2>\n<p>The following steps demonstrate how to create a DarkShield NoSQL job through the IRI Workbench wizard.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Step 1: Launch the NoSQL Search\/Masking Wizard<\/h3>\n<p>In IRI Workbench, open the <strong>DarkShield<\/strong> menu and select:<br \/>\n<strong>\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 New NoSQL DB Search\/Masking Job&#8230;<\/strong><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16933\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-05-153446-300x226.png\" alt=\"IRI Workbench DarkShield menu with the New NoSQL DB Search\/Masking Job wizard selected.\" width=\"344\" height=\"259\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-05-153446-300x226.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-05-153446.png 425w\" sizes=\"(max-width: 344px) 100vw, 344px\" \/><\/p>\n<p>Launch the wizard from the DarkShield menu by selecting New NoSQL DB Search\/Masking Job. This opens the first page, where you name the new job:<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16934\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-05-153547-300x250.png\" alt=\"New NoSQL Search\/Masking Job wizard specifying the output folder, job name, subfolder, and Search and Mask job type.\" width=\"413\" height=\"344\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-05-153547-300x250.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-05-153547.png 526w\" sizes=\"(max-width: 413px) 100vw, 413px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">Choose the destination folder and file name for the resulting <code dir=\"ltr\">.dsc<\/code> configuration file.\u00a0Once the location and name are specified, click <strong>Next<\/strong> to configure the sensitive data that DarkShield will search for and the masking operations to apply.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Step 2: Select Data Classes and Masking Rules<\/h3>\n<p>The next page allows you to select the IRI Data Class and Rule Library that contains the Data Classes, Data Class Groups, and masking Rules available to the job.<\/p>\n<p>The wizard provides an <strong>Active<\/strong> column for selecting or deselecting individual Data Classes and groups.\u00a0This allows you to control which types of sensitive information will be included in the search.\u00a0For this example, the job uses the default Data Classes provided when the IRI project was created.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16935\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/new-nosql-search-masking-job-291x300.png\" alt=\"DarkShield NoSQL wizard listing active Data Classes for license plates, VINs, names, emails, phone numbers, and other sensitive information.\" width=\"504\" height=\"519\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/new-nosql-search-masking-job-291x300.png 291w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/new-nosql-search-masking-job.png 537w\" sizes=\"(max-width: 504px) 100vw, 504px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">Next, open the <strong>Masking Rules<\/strong> tab.\u00a0The example library contains two available masking functions:<\/p>\n<ul>\n<li><strong>Format Preserving Encryption (FPE)<\/strong>, which is used to encrypt matching values according to the configured rule.<\/li>\n<li><strong>Blur Date<\/strong>, which is used to transform date values according to the configured rule.<\/li>\n<\/ul>\n<p>The Masking Rules tab also allows users to add or remove rules as needed.<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16936\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/default-Data-Classes-Masking-Rule-290x300.png\" alt=\"DarkShield NoSQL wizard showing Format Preserving Encryption and Blur Date rules in the Masking Rules tab.\" width=\"485\" height=\"502\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/default-Data-Classes-Masking-Rule-290x300.png 290w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/default-Data-Classes-Masking-Rule.png 537w\" sizes=\"(max-width: 485px) 100vw, 485px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">After confirming the available Data Classes and Rules, click <strong>Next<\/strong> to continue.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Step 3: Assign Masking Rules to Data Classes<\/h3>\n<p>The <strong>Assign Masking Rules to Data Classes<\/strong> page defines which masking function will apply to each active Data Class or Data Class Group.\u00a0Each active Data Class or group must have an assigned masking Rule.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16937\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/assign-masking-rules-click-next-288x300.png\" alt=\"DarkShield wizard mapping active Data Classes to Format Preserving Encryption and Blur Date masking rules.\" width=\"505\" height=\"526\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/assign-masking-rules-click-next-288x300.png 288w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/assign-masking-rules-click-next.png 533w\" sizes=\"(max-width: 505px) 100vw, 505px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">If you do not want to mask a particular PII data type, click <strong>Back<\/strong> and deselect its <strong>Active<\/strong> checkbox in the Data Class or Data Class Group tab.\u00a0Then return to the assignment page and complete the remaining rule mappings.\u00a0These assignments determine how DarkShield transforms the sensitive information identified during the search.<\/p>\n<p>Once the mappings are complete, click <strong>Next<\/strong> to configure the NoSQL source database.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Step 4: Configure the NoSQL Source Database<\/h3>\n<p>The <strong>NoSQL Source<\/strong> page prompts you to select the database type and specify a connection registry.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16938\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/nosql-db-type-cassandra-300x251.png\" alt=\"DarkShield NoSQL Source wizard showing Cassandra, Elasticsearch, and MongoDB database type options.\" width=\"492\" height=\"412\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/nosql-db-type-cassandra-300x251.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/nosql-db-type-cassandra.png 525w\" sizes=\"(max-width: 492px) 100vw, 492px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">The wizard version demonstrated in this article provides three database type options:<\/p>\n<ul>\n<li>Cassandra<\/li>\n<li>Elasticsearch<\/li>\n<li>MongoDB<\/li>\n<\/ul>\n<p>A <strong>Connection Registry<\/strong> is a reusable connection configuration containing the information required to connect to a particular data silo.<\/p>\n<p>To create a source connection, select the appropriate NoSQL database type and click <strong>New<\/strong>.<\/p>\n<p>Because each database system has different connection requirements, the configuration fields vary by database type.<\/p>\n<h4 data-pm-slice=\"1 1 []\">Cassandra Connection Configuration<\/h4>\n<p>For Cassandra, the connection dialog includes fields for the connection name, hosts, port, keyspace, table, datacenter, username, and password.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16939\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-085737-300x259.png\" alt=\"Cassandra connection wizard showing hosts, port, keyspace, table, datacenter, and credential fields.\" width=\"524\" height=\"453\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-085737-300x259.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-085737.png 510w\" sizes=\"(max-width: 524px) 100vw, 524px\" \/><\/p>\n<h4 data-pm-slice=\"1 1 []\">Elasticsearch Connection Configuration<\/h4>\n<p>For Elasticsearch, the connection dialog includes the connection name, hosts, port, cluster, index, username, and password.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16940\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-085909-300x259.png\" alt=\"Elasticsearch connection wizard showing host, port, cluster, index, and authentication settings.\" width=\"527\" height=\"455\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-085909-300x259.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-085909.png 509w\" sizes=\"(max-width: 527px) 100vw, 527px\" \/><\/p>\n<h4 data-pm-slice=\"1 1 []\">MongoDB Connection Configuration<\/h4>\n<p>For MongoDB, the connection dialog includes the connection name, URL, database, scope of operation, and collection.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16941\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-125943-300x260.png\" alt=\"MongoDB connection wizard showing connection URL, database, collection scope, and source collection name.\" width=\"505\" height=\"438\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-125943-300x260.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-125943.png 508w\" sizes=\"(max-width: 505px) 100vw, 505px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">After entering the required connection parameters for your selected database, click <strong>Finish<\/strong> to create the Connection Registry.\u00a0The wizard then returns to the NoSQL Source page, displaying the selected registry.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16942\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-130149-300x252.png\" alt=\"DarkShield NoSQL Source wizard showing MongoDB selected with the mongo_src connection registry.\" width=\"504\" height=\"424\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-130149-300x252.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-130149.png 523w\" sizes=\"(max-width: 504px) 100vw, 504px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">Click <strong>Next<\/strong> to proceed to the NoSQL Target configuration.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Step 5: Configure the NoSQL Target Database<\/h3>\n<p>The <strong>NoSQL Target<\/strong> page specifies where DarkShield will write the masked data.\u00a0As with the source, the target uses a Connection Registry to identify the NoSQL data silo and provide the necessary connection information and credentials.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16943\" style=\"text-align: start;\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-130509-300x252.png\" alt=\"DarkShield NoSQL Target wizard showing MongoDB selected with the mongo_trgt connection registry.\" width=\"515\" height=\"433\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-130509-300x252.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-130509.png 526w\" sizes=\"(max-width: 515px) 100vw, 515px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">If a suitable target Connection Registry does not already exist, create one using the same process described for the source.\u00a0In this example, the MongoDB target configuration identifies the target collection as <strong>masked_data<\/strong>.<\/p>\n<p style=\"text-align: center;\"><span style=\"font-weight: 400;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16945\" src=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/mongodb-config-e1704407130432-300x261.png\" alt=\"MongoDB connection wizard configuring the masked_data target collection for the DarkShield masking job.\" width=\"464\" height=\"404\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/mongodb-config-e1704407130432-300x261.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/mongodb-config-e1704407130432.png 504w\" sizes=\"(max-width: 464px) 100vw, 464px\" \/>\u00a0<\/span><\/p>\n<p data-pm-slice=\"1 1 []\">Once the target Connection Registry is selected, click <strong>Finish<\/strong>.<br \/>\nThe wizard generates the <code dir=\"ltr\">.dsc<\/code> job configuration file that the DarkShield API will use at runtime.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16946\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-130926.png\" alt=\"IRI Workbench Project Explorer showing the generated new_nosql_job.dsc DarkShield configuration file.\" width=\"236\" height=\"122\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">The new job is now available in the IRI project.<\/p>\n<h2 data-pm-slice=\"1 1 []\">DarkShield Job Editor<\/h2>\n<p>After completing the wizard, you can open the generated <code dir=\"ltr\">.dsc<\/code> file in the <strong>DarkShield Job editor<\/strong> within IRI Workbench.<\/p>\n<p>This form editor allows you to review and modify parameters initially defined through the wizard without creating a new job from the beginning.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18108\" src=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Job-wizard-nosql-1-300x269.png\" alt=\"DarkShield Job editor showing NoSQL source and target configurations, Data Class rule mappings, and masking preview fields.\" width=\"611\" height=\"548\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Job-wizard-nosql-1-300x269.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/DarkShield-Job-wizard-nosql-1.png 699w\" sizes=\"(max-width: 611px) 100vw, 611px\" \/><\/p>\n<h3 data-pm-slice=\"1 1 []\">Modifying Source and Target Connections<\/h3>\n<p>The editor allows you to add, edit, or remove the source and target configurations associated with the job.<\/p>\n<p>To modify a connection, click <strong>Edit&#8230;<\/strong> beside the corresponding source or target entry.\u00a0This lets you update the connection information after the original job configuration has been generated.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Modifying Data Class and Masking Rule Mappings<\/h3>\n<p>You can also change the Data Class Rule Mappings through the <strong>Modify<\/strong> button.<\/p>\n<p>The editor allows you to select a different IRI Library or rearrange the masking Rules assigned to Data Classes.\u00a0These modifications determine how the configured job searches for and transforms sensitive information.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Previewing Search and Masking Results<\/h3>\n<p>The DarkShield Job editor also includes a <strong>Preview<\/strong> function. The preview allows users to test their Data Class Search Matchers and masking Rules against supplied text input.<\/p>\n<p>Clicking <strong>Preview<\/strong> shows which sensitive information was identified and how the configured masking Rules transformed it. This provides a way to inspect the behavior of the configured matchers and masking functions before executing the job against the NoSQL source.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Running Your DarkShield Search and Masking Job<\/h2>\n<p>DarkShield supports three ways to use the configured job.<\/p>\n<ol>\n<li><strong>Search Job:<\/strong> Identifies PII and records the findings in a log file.<\/li>\n<li><strong>Masking Job:<\/strong> Uses a search log to mask previously discovered PII.<\/li>\n<li><strong>Search and Masking Job:<\/strong> Searches for and masks PII in a single job.<\/li>\n<\/ol>\n<p>These options allow discovery and masking to be performed separately or together, depending on the intended workflow.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Execute the Search and Masking Job<\/h3>\n<p>For this demonstration, the job will search for and mask sensitive information in one operation.<\/p>\n<p>To run the configured job, right-click the <code dir=\"ltr\">.dsc<\/code> file in IRI Workbench and select:<br \/>\n<strong>IRI &gt; Run Search and Masking Job<\/strong><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16948\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-131801-300x221.png\" alt=\"IRI Workbench context menu showing the option to run a DarkShield Search and Masking Job from a DSC file.\" width=\"629\" height=\"463\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-131801-300x221.png 300w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-131801.png 703w\" sizes=\"(max-width: 629px) 100vw, 629px\" \/><\/p>\n<p>DarkShield then executes the configured search and masking operations using the Data Classes, masking Rules, and source and target connections defined in the job.<\/p>\n<h3 data-pm-slice=\"1 1 []\">Review the Masked MongoDB Data<\/h3>\n<p>After the Search and Masking Job completes, DarkShield writes the masked data to the target silo previously specified in the wizard.\u00a0The following example compares the source MongoDB collection with the resulting protected collection.<\/p>\n<p data-pm-slice=\"1 1 []\"><strong>Before masking: Original MongoDB collection<\/strong><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16949\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-133640-266x300.png\" alt=\"MongoDB Compass showing original collection records with readable personal information before DarkShield masking.\" width=\"572\" height=\"645\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-133640-266x300.png 266w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-133640.png 596w\" sizes=\"(max-width: 572px) 100vw, 572px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\"><strong>After masking: Protected MongoDB collection<\/strong><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-16950\" src=\"\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-133600-265x300.png\" alt=\"MongoDB Compass showing the masked_data collection with transformed personal information after DarkShield masking.\" width=\"532\" height=\"603\" srcset=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-133600-265x300.png 265w, https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/Screenshot-2023-07-06-133600.png 593w\" sizes=\"(max-width: 532px) 100vw, 532px\" \/><\/p>\n<p data-pm-slice=\"1 1 []\">The example demonstrates how the configured DarkShield job identifies sensitive information in a MongoDB collection and applies the assigned masking Rules before writing the protected data to the target collection.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Frequently Asked Questions (FAQs)<\/h2>\n<h3>What NoSQL databases are supported by the DarkShield GUI?<\/h3>\n<p>The NoSQL wizard version demonstrated in this article provides configuration options for Cassandra, Elasticsearch, and MongoDB. DarkShield Version 6 also includes separate GUI integrations for Cosmos DB, Redis, and Splunk. The DarkShield API can support additional NoSQL sources through custom calling programs.<\/p>\n<h3>What is a DarkShield .dsc file?<\/h3>\n<p>A <code dir=\"ltr\">.dsc<\/code> file is an XML-based DarkShield job configuration containing Search Contexts and Mask Contexts. These define the data source, search configuration, masking instructions, and target connection used when the job runs.<\/p>\n<h3>Can DarkShield search for sensitive data without masking it?<\/h3>\n<p>Yes. DarkShield supports a Search Job that identifies PII and logs the results without performing masking. It also supports a separate Masking Job that uses the search log and a combined Search and Masking Job.<\/p>\n<h3>How does DarkShield determine which PII values to mask?<\/h3>\n<p>DarkShield uses Data Classes containing Search Matchers to identify sensitive information. Masking Rules assigned to those Data Classes determine how the matching values are transformed.<\/p>\n<h3>Can I modify a DarkShield NoSQL job after creating it?<\/h3>\n<p>Yes. The DarkShield Job editor allows users to modify source and target configurations, change the selected IRI Library, adjust Data Class Rule Mappings, and preview search and masking behavior.<\/p>\n<h2 data-pm-slice=\"1 1 []\">Ready to Find and Mask PII in Your NoSQL Database?<\/h2>\n<p>See how IRI DarkShield can help you discover and mask sensitive information in MongoDB, Cassandra, and Elasticsearch using configurable search and masking rules.<\/p>\n<p><a href=\"https:\/\/www.iri.com\/products\/go\/free-trial\"><strong>Start your free 30-day trial<\/strong><\/a> to evaluate DarkShield on your own data and platform, with technical support included at no cost.\u00a0For questions, a demonstration, or assistance with your specific data protection requirements, <a href=\"https:\/\/www.iri.com\/company\/contact\">contact IRI<\/a> or email <a href=\"mailto:darkshield@iri.com\"><strong>darkshield@iri.com<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article explains how to use IRI DarkShield to find and mask personally identifiable information (PII) and other sensitive data in NoSQL databases. Introduction IRI DarkShield provides purpose-built wizards in the IRI Workbench integrated development environment (IDE) for searching, classifying, and masking sensitive information. These capabilities apply to structured, semi-structured, and unstructured data in files,<\/p>\n<div><a class=\"btn-filled btn\" href=\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\" title=\"Masking NoSQL DB PII in the DarkShield GUI\">Read More<\/a><\/div>\n","protected":false},"author":152,"featured_media":19714,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[8],"tags":[1429,1788,1428,1726,18,13,1470,1789,1725,1727,1317,1273,1427,1814],"class_list":["post-16781","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection","tag-cassandra-data-masking","tag-cassandra-data-security","tag-cassandra-database-masking","tag-darkshield-gui","tag-data-privacy","tag-data-protection-2","tag-elasticsearch-data-masking","tag-elasticsearch-security","tag-finding-nosql-db","tag-masking-nosql-db","tag-mongo-database-protection","tag-mongodb-data-masking","tag-mongodb-database-masking","tag-nosql-data-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.4 (Yoast SEO v23.4) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>NoSQL Data Masking with the IRI DarkShield GUI<\/title>\n<meta name=\"description\" content=\"Learn how to perform NoSQL data masking with IRI DarkShield in MongoDB, Cassandra, and Elasticsearch using its GUI, Data Classes, and masking rules.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Masking NoSQL DB PII in the DarkShield GUI\" \/>\n<meta property=\"og:description\" content=\"Learn how to perform NoSQL data masking with IRI DarkShield in MongoDB, Cassandra, and Elasticsearch using its GUI, Data Classes, and masking rules.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\" \/>\n<meta property=\"og:site_name\" content=\"IRI\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-04T22:29:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-06T21:08:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1110\" \/>\n\t<meta property=\"og:image:height\" content=\"532\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Adam Lewis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adam Lewis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\"},\"author\":{\"name\":\"Adam Lewis\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e\"},\"headline\":\"Masking NoSQL DB PII in the DarkShield GUI\",\"datePublished\":\"2024-01-04T22:29:49+00:00\",\"dateModified\":\"2026-11-06T21:08:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\"},\"wordCount\":2177,\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png\",\"keywords\":[\"cassandra data masking\",\"cassandra data security\",\"cassandra database masking\",\"Darkshield GUI\",\"data privacy\",\"data protection\",\"Elasticsearch data masking\",\"Elasticsearch security\",\"finding NoSQL DB\",\"Masking NoSQL DB\",\"mongo database protection\",\"MongoDB data masking\",\"mongodb database masking\",\"NoSQL data security\"],\"articleSection\":[\"Data Masking\/Protection\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\",\"url\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\",\"name\":\"NoSQL Data Masking with the IRI DarkShield GUI\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png\",\"datePublished\":\"2024-01-04T22:29:49+00:00\",\"dateModified\":\"2026-11-06T21:08:33+00:00\",\"description\":\"Learn how to perform NoSQL data masking with IRI DarkShield in MongoDB, Cassandra, and Elasticsearch using its GUI, Data Classes, and masking rules.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png\",\"width\":1110,\"height\":532,\"caption\":\"IRI DarkShield NoSQL data masking illustration featuring MongoDB, Cassandra, and Elasticsearch databases with data discovery and security icons.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.iri.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Masking NoSQL DB PII in the DarkShield GUI\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.iri.com\/blog\/#website\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"name\":\"IRI\",\"description\":\"Total Data Management Blog\",\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.iri.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\",\"name\":\"IRI\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"width\":750,\"height\":206,\"caption\":\"IRI\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e\",\"name\":\"Adam Lewis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g\",\"caption\":\"Adam Lewis\"},\"url\":\"https:\/\/www.iri.com\/blog\/author\/adaml\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"NoSQL Data Masking with the IRI DarkShield GUI","description":"Learn how to perform NoSQL data masking with IRI DarkShield in MongoDB, Cassandra, and Elasticsearch using its GUI, Data Classes, and masking rules.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/","og_locale":"en_US","og_type":"article","og_title":"Masking NoSQL DB PII in the DarkShield GUI","og_description":"Learn how to perform NoSQL data masking with IRI DarkShield in MongoDB, Cassandra, and Elasticsearch using its GUI, Data Classes, and masking rules.","og_url":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/","og_site_name":"IRI","article_published_time":"2024-01-04T22:29:49+00:00","article_modified_time":"2026-11-06T21:08:33+00:00","og_image":[{"width":1110,"height":532,"url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png","type":"image\/png"}],"author":"Adam Lewis","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Adam Lewis","Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#article","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/"},"author":{"name":"Adam Lewis","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e"},"headline":"Masking NoSQL DB PII in the DarkShield GUI","datePublished":"2024-01-04T22:29:49+00:00","dateModified":"2026-11-06T21:08:33+00:00","mainEntityOfPage":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/"},"wordCount":2177,"publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png","keywords":["cassandra data masking","cassandra data security","cassandra database masking","Darkshield GUI","data privacy","data protection","Elasticsearch data masking","Elasticsearch security","finding NoSQL DB","Masking NoSQL DB","mongo database protection","MongoDB data masking","mongodb database masking","NoSQL data security"],"articleSection":["Data Masking\/Protection"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/","url":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/","name":"NoSQL Data Masking with the IRI DarkShield GUI","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage"},"image":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png","datePublished":"2024-01-04T22:29:49+00:00","dateModified":"2026-11-06T21:08:33+00:00","description":"Learn how to perform NoSQL data masking with IRI DarkShield in MongoDB, Cassandra, and Elasticsearch using its GUI, Data Classes, and masking rules.","breadcrumb":{"@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#primaryimage","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png","width":1110,"height":532,"caption":"IRI DarkShield NoSQL data masking illustration featuring MongoDB, Cassandra, and Elasticsearch databases with data discovery and security icons."},{"@type":"BreadcrumbList","@id":"https:\/\/www.iri.com\/blog\/data-protection\/finding-and-masking-nosql-dbs-with-the-darkshield-gui\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.iri.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Masking NoSQL DB PII in the DarkShield GUI"}]},{"@type":"WebSite","@id":"https:\/\/www.iri.com\/blog\/#website","url":"https:\/\/www.iri.com\/blog\/","name":"IRI","description":"Total Data Management Blog","publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.iri.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.iri.com\/blog\/#organization","name":"IRI","url":"https:\/\/www.iri.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","width":750,"height":206,"caption":"IRI"},"image":{"@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/37c0e5beab094bd61cc521902df2876e","name":"Adam Lewis","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/087667d0c75d33bb6fab6e734bd89333?s=96&d=blank&r=g","caption":"Adam Lewis"},"url":"https:\/\/www.iri.com\/blog\/author\/adaml\/"}]}},"jetpack_featured_media_url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2024\/01\/updated-featured-image-Masking-NoSQL-DB-PII-in-the-DarkShield-GUI.png","_links":{"self":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/16781"}],"collection":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/users\/152"}],"replies":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/comments?post=16781"}],"version-history":[{"count":30,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/16781\/revisions"}],"predecessor-version":[{"id":19716,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/16781\/revisions\/19716"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media\/19714"}],"wp:attachment":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media?parent=16781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/categories?post=16781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/tags?post=16781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}