I am trying to mask sensitive data from the API logs (not trace). As I understood it, the Data Masking functionality that is offered by Apigee only regards tracing/debugging sessions, but NOT logging (http://apigee.com/docs/api-services/content/data-masking).
Whats the best practice around masking sensitive data in logs? can you share some reference code?