Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Jan Jaap Zijlstra (JanJaapZ6862)
BPM Company

BPM Company
NL
JanJaapZ6862 Member since 2012 3 posts
BPM Company
Posted: Feb 27, 2020
Last activity: Mar 9, 2020
Posted: 27 Feb 2020 8:14 EST
Last activity: 9 Mar 2020 8:02 EDT
Closed

Insecure data from exceptions in log files?

Hi,

Currently I'm considering to use PDC for our customer. Because our customer has very strict security requirements I'm investigating the risks of using PDC, being a Cloud solution.

One question I still have is this: Is it possible to log exceptions in the log file with too much sensitive information, and this information becomes visible in PDC?

So it will only be 100% secure if the developers don't log sensitive information in the log files?

 

Regards,

 

Jan-Jaap

To see attachments, please log in.
Security

Posted: 4 years ago
Posted: 9 Mar 2020 8:02 EDT
Steven Baker (bakes)
PEGA
Principal Cloud Operations Engineer, Infrastructure
Pegasystems Inc.
US

Developers log data in log message statements that go inside the pegarules log file but they don't make it to PDC.

While developers shouldn't be explicitly throwing exceptions, please let us know if you have any specific examples so we can make sure we cover them. 

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice