You could just use a log format that excludes or obfuscates IP addresses, I believe.