Consider making onlyLogRecordMetadata true by default

[jjathman]

Having the default configuration in ConsumerProperties.onlyLogRecordMetadata be true by default. The standard configuration has the potential issue of logging sensitive data and wouldn't be expected by most developers in my opinion. Also, when using Spring Boot modifying this value is not very easy (see spring-projects/spring-boot#24568).

For example, I work in a health care setting and we would often have patient information in Kafka messages. We would not want this information logged in any circumstance. I was a little surprised to see that the SeekToCurrentErrorHandler would end up logging the entire record from the topic.

I think this kind of verbose logging is something that should only be enabled explicitly by users.

[garyrussell]

Also, when using Spring Boot modifying this value is not very easy ...

It is quite easy - just add this to your app...

@Component
class Customizer {

	Customizer(AbstractKafkaListenerContainerFactory<?, ?, ?> factory) {
		factory.getContainerProperties().setOnlyLogRecordMetadata(true);
	}

}

[snicoll]

Indeed, and the other issue you've created means a property should be exposed as of Spring Boot 2.5....

[jjathman]

@garyrussell Ah OK. Thanks for that tip, I was really struggling with how to update this property.