Suppressing sensitive data in alerts
Version:
The alert log identifies the names of activities and other rules that have been executed. By default, PEGA0002 to PEGA0007 alerts also show parameter values and SQL statements containing property values. You can include the suppressInserts
and includeParameterPage
keywords in the prconfig.xml file so that parameter values and other potentially sensitive data values are omitted in prepared statement inserts:
For a complete list of alert log settings, refer to the Pega Community article Security settings in the prconfig.xml file.
-
Add the following to the prconfig.xml file:
<env name="alerts/database/operationTimeThreshold/suppressInserts" value="true" /> <env name="alerts/general/includeParameterPage" value="false" />
-
Stop and restart or redeploy the system.
Related Content
Article
AlertsArticle
Parsing the alert logArticle
Summarizing the alert logArticle
Alert format