-Dotel.instrumentation.common.db-statement-sanitizer.enabled=false is not taking effect

[bran1501]

Describe the bug

When instrumenting using the opentelemetry-java-instrumentation SDK version 1.39.0
I disable otel.instrumentation.common.db-statement-sanitizer.enabled and the content still shows up with the '?'.
I am getting these tags
db.connection_string
sqlserver://xxxxx1433

db.statement
{ call xxxxxx}

otel.library.name
io.opentelemetry.jdbc

otel.library.version
2.5.0-alpha

I confirmed this is working by enabling debug and saw in the logs:
[otel.javaagent 2024-10-04 22:00:00:739 +0000] [supportability_metrics_reporter] DEBUG io.opentelemetry.javaagent.shaded.instrumentation.api.internal.SupportabilityMetrics - Counter 'SqlStatementSanitizer cache miss' : 1

This is a trace example:
masked_trace.json

Steps to reproduce

Instrument a Java application making calls to a Microsoft sql server.
Instrument Java and include to the JAVA_OPTS =-Dotel.instrumentation.common.db-statement-sanitizer.enabled=false

Expected behavior

It should disable the sanitizer

Actual behavior

It's not disabling the sanitizer

Javaagent or library instrumentation version

1.39.0

Environment

JDK:telemetry.sdk.version: 1.39.0
OS: Windows Server 2019 10.0

Additional context

No response

[trask]

hi @bran1501! check out #7400 and #7413 and let us know if that is the same issue you are having

[bran1501]

Hi @trask I did check those but I didn't find any workaround/fix. I guess this means that we need a sponsor to fix it?

[laurit]

@bran1501 you have misunderstood the issues that @trask linked above, I'd advise you to carefully reread them. otel.instrumentation.common.db-statement-sanitizer.enabled flag controls whether literals are replaced with ? in db statements, disabling this flag will not replace ? that you have in prepared statement with the bound value. There is a feature request for that #7413

[bran1501]

Understood, Thanks @laurit