Hiding password in MaxL output log

Question

On Win2K platform, I have a MaxL script that accepts 2 parameters and performs some actions.I invoke the script using a batch file in the following format:ESSMSH C:\scripts\Script1.msh AdminID passwordThe Maxl script sends all activity to a log file which is then automatically e-mailed to end users.The problem I have is that the log file contains the AdminID and password that was used in the MaxL script. I need all activity in the log because I automatically scan the log for errors.Is there a way using some of the available MaxL Shell Invocation flags that will perfrom the same action but hide the password from showing up in the log?Regards,Tom M.Essbase 6.5.4

Answer 1

We just upgraded to Essbase 7.1.3. Due to security concern, our security auditor is concern we even see the password in the Malx output log. Even we try to doa grep -v or sed -e on the password line to replace the old log, there is still a good window long enough to people to see it.<BR><BR>I tried spool and set message level, but none of them hides the login statement display. I also tried to use shell escape feature to run old ESSCMD login with MaxL, but couldn't get it to work. I was wondering if anyone who may have a new solution to this problem that can fix it on the fly other than fix it after the entire process is complete.<BR><BR>Essbase really should consider provide an option to hide the password in the output logic, or pad it with XXXXXXXXX.