Suppressing sensitive data in alerts
The alert log identifies the names of activities and other rules that have been executed. By default, PEGA0002 to PEGA0007 alerts also show parameter values and SQL statements containing property values. You can include the
suppressInserts
and
includeParameterPage
keywords in the prconfig.xml file so that parameter values and other potentially sensitive data values are omitted in prepared statement inserts:
For a complete list of alert log settings, refer to the
Pega Community article Security settings in the prconfig.xml file.
- Add the following to the prconfig.xml file:
<env name="alerts/database/operationTimeThreshold/suppressInserts" value="true" /> <env name="alerts/general/includeParameterPage" value="false" />
- Stop and restart or redeploy the system.
Previous topic Parsing the alert log Next topic Summarizing the alert log