Skip to navigation

Presence of Personally Identifying Information (PII)

This alert is triggered when the Redact Processor has the option Mask PII Presence set to On and a social security number, email address, or custom-defined pattern of PII is detected in the telemetry data.

General Configuration

FieldValue
NamePII Data Present
DescriptionTriggers when the metadata field pii_presence contains a yes value for any of the pre-set or custom PII types.

Evaluation and Condition Configuration

FieldValue
Operation
Window Type
Window Duration (minutes)
Group by Field Paths
Operation
Window Type
Window Duration
Conditional Statement
Event Timestamp