IBM Support

Encrypted Details of CreditCard Information showing up in the logs

Question & Answer


Question

How do you use log4j to mask CC information in verbose logs?

Answer

To mask the credit card numbers from the log files you must set up log4j filters.
There is a good write up in the info center @
http://www.ibm.com/support/knowledgecenter/SS6QYM_9.2.0/com.ibm.help.custom.basics.doc/Cstm_mask_info_using_log4j.html?cp=SS6QYM_9.2.0%2F1-14-1-0-0-3-0

First, define an appropriate regular expression of text in the log file and add the same as an additional pattern in their log4j filter configuration.

For example, if you add a new pattern as below in customer_overrrides, then you can replace it with ****

logfilter.filterset.common-filter.pattern.3=(&creditCardNo)=([\w\-]+)&.*
?
logfilter.filterset.common-filter.replace.3=$1=****

Note that, the log4j filters have been provided by the product to enable you to define your own regular expressions and mask any information which you do not want in the log files.

Related Information

Log4J custom filters

[{"Product":{"code":"SS6PEW","label":"IBM Sterling Order Management"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Not Applicable","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"9.2.1;9.2","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21961304

Page Feedback