---
title: Swizzling and network capture
description: Enable swizzling
url: https://coralogix.com/docs/user-guides/rum/sdk-installation/apple/ios/configuration/swizzling-and-network-capture/
product: rum
feature: iOS SDK
feature_id: mobile-sdk-ios
feature_identifier: rum/mobile-sdk-ios
last_updated: '2026-09-09'
---

# Swizzling and network capture

### Enable swizzling

Controls whether the SDK automatically swizzles system methods for instrumentation (e.g. `NSURLSession`, view-controller lifecycle). Enabled by default. Set to `false` only if another library conflicts with Coralogix's swizzling.

```
let options = CoralogixExporterOptions(coralogixDomain: CORALOGIX-DOMAIN,

                                        environment: "ENVIRONMENT",

                                        application: "APP-NAME",

                                        version: "APP-VERSION",

                                        publicKey: "API-KEY",

                                        enableSwizzling: false)
```

### Network header & payload capture

Use `networkExtraConfig` to opt-in to capturing request/response headers and bodies for specific URLs. By default no headers or payloads are captured.

Each `NetworkCaptureRule` matches requests by a **case-insensitive substring** of the absolute URL or by a **regex pattern**, and lets you allowlist which headers to forward and whether to capture bodies.

```
// Build regex patterns separately so the throwing init is handled cleanly.

// For known-good literal patterns you can use try! at development time;

// for patterns loaded from config use try? and check for nil before adding the rule.

let ordersPattern = try! NSRegularExpression(pattern: #"checkout/orders/\d+"#)



let options = CoralogixExporterOptions(coralogixDomain: CORALOGIX-DOMAIN,

                                        environment: "ENVIRONMENT",

                                        application: "APP-NAME",

                                        version: "APP-VERSION",

                                        publicKey: "API-KEY",

                                        networkExtraConfig: [

                                            // Capture Authorization header and response body for all /api/ requests

                                            NetworkCaptureRule(url: "/api/",

                                                               reqHeaders: ["Authorization", "X-Request-ID"],

                                                               resHeaders: ["Content-Type"],

                                                               collectResPayload: true),

                                            // Capture full request and response for URLs matching a regex

                                            NetworkCaptureRule(urlPattern: ordersPattern,

                                                               collectReqPayload: true,

                                                               collectResPayload: true)

                                        ])
```

Note

Only allowlist URLs and header names you are comfortable logging. Avoid capturing `Authorization` or other sensitive headers unless intentional. Body and header capture should not be used for endpoints that return or send PII or secrets. Request and response bodies over 1024 characters are **dropped** (not truncated) and do not appear in RUM.

### User action text redaction (`shouldSendText`)

Called before `target_element_inner_text` is recorded for a tapped view. Return `false` to redact text for sensitive views (e.g. fields showing account numbers or personal data) without disabling text capture globally.

Redacted text is reported as `***` rather than omitted, so a redacted tap stays distinguishable from a tap on an element that had no text at all. Views that are already masked — a view inside a [masked subtree](https://coralogix.com/docs/user-guides/rum/sdk-installation/apple/ios/features/session-replay.md#masking-a-specific-view-cxmask), a tap landing on a SwiftUI `.cxMask()` overlay, a password field, or a field with a sensitive `textContentType` — report `***` without consulting this closure, so their text is never passed to your code. Text masked only by session replay's pixel policy (`maskText`, `maskAllImages`) *is* passed to this closure, since that policy does not set `is_masked_element` — this closure is the lever for withholding it.

Interactions reported through the hybrid bridge (`setUserInteraction` — React Native, Flutter) are redacted on the same terms as native ones: the payload's coordinates are tested against the same mask geometry, and a masked tap's inner text is replaced with `***`.

This closure is called on the **main thread** only when the SDK would otherwise record text. Keep it fast and non-blocking.

```
let options = CoralogixExporterOptions(coralogixDomain: CORALOGIX-DOMAIN,

                                        environment: "ENVIRONMENT",

                                        application: "APP-NAME",

                                        version: "APP-VERSION",

                                        publicKey: "API-KEY",

                                        shouldSendText: { view, text in

                                            // Suppress text for any view tagged as sensitive

                                            return view.accessibilityIdentifier != "sensitiveLabel"

                                        })
```

### Custom target element name (`resolveTargetName`)

Override the `target_element` field in user action events with a business-friendly name instead of the raw UIKit class name. Return `nil` to fall back to the default class name (e.g. `"UIButton"`).

Note

`resolveTargetName` only affects `target_element`. The `element_classes` field always contains the real UIKit class name (e.g. `"UIButton"`) regardless of what the closure returns, so existing analytics queries and backwards-compatible dashboards that filter on `element_classes` continue to work unchanged.

This closure is called on the **main thread** on every tap event. Keep it fast and non-blocking.

```
let options = CoralogixExporterOptions(coralogixDomain: CORALOGIX-DOMAIN,

                                        environment: "ENVIRONMENT",

                                        application: "APP-NAME",

                                        version: "APP-VERSION",

                                        publicKey: "API-KEY",

                                        resolveTargetName: { view in

                                            switch view.accessibilityIdentifier {

                                            case "loginButton":   return "Login Button"

                                            case "checkoutBtn":   return "Checkout"

                                            case "addToCartBtn":  return "Add to Cart"

                                            default:              return nil // use UIKit class name

                                            }

                                        })
```