logscrub

logscrub reads logs on standard input or from files and masks API keys,
tokens, passwords, private keys and personal data such as email addresses,
so the logs can be shared safely. It streams its input, handles very long
lines, and can replace values with stable pseudonyms.

The snap is strictly confined: it can read and write files in your home
directory and on removable media, not elsewhere (for /var/log, pipe the file
in: sudo cat /var/log/app.log | logscrub). logscrub serve starts the local
web UI on a loopback address.