Splunk Search

PII Data scan


Need help to write a generic query to capture PII Data ( social security numbers / credit card numbers /  email addresses )  from  application log ?

Labels (1)
0 Karma

Ultra Champion

There is no such thing as "generic PII data scan".

Firstly, you need to define what you want to find, then define how this data can be expressed, then you search for it.

And you'll always get false positives and false negatives. That's just how it is with automated searching for such loosely defined stuff.

The more precisely defined format, the better (like IBAN numbers).

0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...