Suppressing sensitive data in alerts

The alert log identifies the names of activities and other rules that have been executed. By default, PEGA0002 to PEGA0007 alerts also show parameter values and SQL statements containing property values. You can include the suppressInserts and includeParameterPage keywords in the prconfig.xml file so that parameter values and other potentially sensitive data values are omitted in prepared statement inserts:

For a complete list of alert log settings, refer to the Pega Community article Security settings in the prconfig.xml file.

1. Add the following to the prconfig.xml file:

   <env name="alerts/database/operationTimeThreshold/suppressInserts"
   value="true" />
   <env name="alerts/general/includeParameterPage" value="false" />

2. Stop and restart or redeploy the system.