Splunk Search

PII Data scan

yuvrajsharma_13
Explorer

Need help to write a generic query to capture PII Data ( social security numbers / credit card numbers /  email addresses )  from  application log ?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

There is no such thing as "generic PII data scan".

Firstly, you need to define what you want to find, then define how this data can be expressed, then you search for it.

And you'll always get false positives and false negatives. That's just how it is with automated searching for such loosely defined stuff.

The more precisely defined format, the better (like IBAN numbers).

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...