Question
Centene Corporation
US
Last activity: 4 Aug 2020 16:36 EDT
Can the logs omit automation parameters?
We are using Pega Robotic Automation to call websites which require PII to be entered in forms (Personally Identifiable Information).
The PII is passed in clear text to the robot from Pega. Then the PII is passed as a parameter through the automation until it is eventually entered into a text box or other such web control.
As this occurs, the log (in the Automation category) records the PII value each time it's a parameter for a procedure and each time it's entered into a web control.
Security has asked us to stop this from happening. However, I don't want to drastically reduce the Automation category logging. The ExecutionLink log entries are critical information for troubleshooting. And if we reduce the log level to prevent the PII, then, per security restrictions, we will never be allowed to increase the log/diagnostic level for troubleshooting an automation.
Is there a feature or setting that stops the Robot Runtime from logging the data that is passed into the automation? Almost everything useful can be logged without repeating that data.
Accepted Solution
Updated: 4 Aug 2020 16:36 EDT
Pegasystems Inc.
US
You may right-click on any data link (the blue lines) and select "Sensitive". This essentially replaces the data passed in that value with the text "--sensitive--". You'll need to do this for every data link containing PII. This is the recommended solution to your issue.
It is possible to make sensitive be the default for all future (not ones you have already created) blue lines and then you can manually change them when you wish to troubleshoot something and need that data. I wouldn't suggest this though, as it will affect every automation you create and every link, so it will make troubleshooting much more difficult.
To do this, we'll make "sensitive" the default value.
- Click on any blue line and go to the "Properties" window.
- Change the value of the "Sensitive" property to True.
- Right-click on the word "Sensitive" and select "Default Value".
Now when you add a new blue link, it will be marked as sensitive.