Skip to content

fix(ui): say on screen when anonymous mode is rewriting what is displayed - #52

Merged
Wasabules merged 2 commits into
mainfrom
fix-anonymous-visible
Sep 29, 2026
Merged

Wasabules merged 2 commits into
mainfrom
fix-anonymous-visible

Conversation

@Wasabules

Copy link
Copy Markdown
Owner

Closes #49.

What was reported

Since version 1.4 SyslogStudio identifies wrong the source of the logs and hostname. Correct are the sources on image with version 1.3 (10.211.8.13)

The sources are not identified wrongly. Anonymous mode is on, and the screenshot shows exactly what that mode promises: 192.0.2.1 (RFC 5737, reserved for documentation) where the collector recorded 10.211.8.13, and host-01, host-02, host-03 for the hostnames. Version 1.3 predates the feature, which is why it looks like a regression introduced by 1.4.

Why it reads as a bug

The mode rewrites every host, address, user name and domain on screen, persists across restarts, and its only sign was a 16 px ghost icon at the bottom of the sidebar, tinted with the accent colour. No words anywhere.

That button sits directly above the settings one, which is how it gets turned on without being meant — and once on, nothing brings it back to mind. Two issues came out of one session in that state: #49, and the "prefix" in #50, which was this mode rewriting a hostname the importer had left inside a message.

Digging for the right remedy turned up the real story: anonymous.active — "Anonymous mode is on" — has been sitting in all eight locale files since the feature landed, rendered nowhere. The indicator was designed and never wired up.

What this does

A banner, while the mode is on, above the columns whose values are substituted:

Anonymous mode banner

  • it names the mode, says what is substituted, and says that stored data and exports are unchanged — the mode is display-only, and someone who has just realised their screen is not the truth will want to know how far that goes;
  • Show real values turns it off from the same place it is read, rather than sending anyone back to an icon they never noticed;
  • a toast fires on the change itself, from either entry point (sidebar or settings), so a misclick announces itself at the moment it happens.

Not changed

The redaction itself. It replaces hosts, addresses, user names, domains, e-mails and MACs — it does not touch vendor-specific fields such as devname= or a serial in devid=, which is visible in the reporter's own screenshot. Widening it by guessing would start renaming ordinary words in message text; the settings panel enumerates what the mode covers rather than promising more than it does.

Verified

svelte-check --fail-on-warnings, the frontend build and go test ./... are clean. Three strings added across all 8 locales (464 keys × 8, parity checked). The screenshots of anonymous mode on the site were regenerated from the real component — they had been showing the misleading state, which is the whole subject of this issue.

…ayed (#49)

Anonymous mode replaces hostnames, addresses, user names and domains
everywhere a log is displayed, and it persists across restarts. The only sign
of it was a 16 px icon at the bottom of the sidebar tinted with the accent
colour — and that button sits directly above the settings one, which is how it
gets turned on without being meant.

So it was reported as the application identifying sources wrongly since v1.4:
a collector recording 10.211.8.13 was showing 192.0.2.1, and nothing anywhere
said why. Two issues came out of one session in that state.

The string for this already existed. "Anonymous mode is on" has been sitting in
all eight locale files since the feature landed, rendered nowhere — the
indicator was designed and then never wired up.

Now a banner states it above the columns whose values are substituted, says
that stored data and exports are unchanged, and carries the way back in the
same place. A toast fires on the change itself, from either entry point, so a
misclick announces itself at the moment it happens rather than three days
later.
It said stored data AND exports were unchanged. Exports are about to stop
being unchanged in anonymous mode — they follow the screen unless the real
values are asked for — and a banner that outlives the sentence it makes is
worse than a shorter one. Stored data is the part that stays true.
@Wasabules
Wasabules merged commit 36f3b5f into main Sep 29, 2026
9 checks passed
@Wasabules
Wasabules deleted the fix-anonymous-visible branch September 29, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] Wrong source IP and hostname identification

1 participant