Hiding user data into Genesys application logs files

[zafzef.mourad]

Hello,

I can't find any Genesys docs talking about how hiding sensitive user data in the logs files of SIP server, ORS, URS, MCP, RM and Stat server ??

Is someone have any idea how or which configuration to use to hide user data.

I know we can use this config "Log-filter" and "defautlt-filter-type" and "log-filter-data" for Tserver but for other Genesys application logs files I can't find anything.

Thanks,

Envoyé de mon Nexus 5 en utilisant Tapatalk

[terry]

Usually the same for other Genesys applications (at least for those using tlib)

[zafzef.mourad]

Thanks Terry...but doesn't work for all :-(


Envoyé de mon Nexus 5 en utilisant Tapatalk

[Kubig]

Can you specify which components seem to be not working with mentioned option/function?

[zafzef.mourad]

I need it specially for SIP and ORS

Envoyé de mon Nexus 5 en utilisant Tapatalk

[cavagnaro]

Post your settings on each application please

[zafzef.mourad]

For sip server I try this option  "Log-filter" and "defautlt-filter-type" and "log-filter-data"

but for ORS I don't know which one use ??

Envoyé de mon Nexus 5 en utilisant Tapatalk

[Tambo]

Also for scrubbing the logs for personal data

[log-filter-data]
Password = hide

This would give the below in the logs (password would be starred out)

message RequestSetCallInfo
AttributeConsultType 3
AttributeOriginalConnID 008b012ece62c8be
AttributeUpdateRevision 2752651
AttributeUserData [111] 00 27 01 00
'DNIS' '8410'
‘PASSWORD' '****'
'RECORD_ID' '8313427'
AttributeConnID 008b012ece62c922

So you would just add in the other KVP that you want to hide such as

'Memorable Name'        'Santa'
'Memorable Place'          'Stringfellows'
'Address4'                          'Nelson Mandela Towers, Peckham'
'Customer Risk Group'  'HIGHRISK'
'Customer Name'            'MR Magoo'

There is a default setting in SIP / TServer that disables the writing of all User Data to the logs but that would stop MISDN being written, so it would need to be done on a case by case setting.

[cavagnaro]

Depends on which ORS part. For example, http strings will not be hidden, for example, a WS return which includes sensitive data on the GET string. A JSON string set to be logged also won't be hiding.
Genesys controls it's UData settings but won't control others. For that on composer you set the block as private.

[zafzef.mourad]

Thanks guys :-)
Tambo: is this work for sip server and ORS also ??

Envoyé de mon Nexus 5 en utilisant Tapatalk

[zafzef.mourad]

Cavagnaro: it's for attch data between ORS and MCP ...between routing strategy and IVR exactly

Envoyé de mon Nexus 5 en utilisant Tapatalk

[cavagnaro]

So...same stuff
Read guide:

Release Number 8.1.400.30
Orchestration Server can now selectively hide sensitive data in logs when the printing of such sensitive data is not explicitly requested by an SCXML strategy. For information on this feature, see "Hiding Sensitive Data" in the Orchestration Server 8.1 Deployment Guide, available on the Genesys Documentation website. (ORS-2423)

[zafzef.mourad]

Thanks Cavagnaro :-) I appreciate ur help

Envoyé de mon Nexus 5 en utilisant Tapatalk