Minimize the risk of exposing sensitive customer data with Logz.io’s log redaction function and benefit from a logging management solution that offers automated sensitive-data scrubbing.

Event logs are no exception when it comes to PCI compliance and Logz.io makes it simpler to prevent logging vulnerabilities and minimize the possibility of data breaches in your raw log files. Best practice is always to mask or redact sensitive information before writing it to the logs, but Logz.io PCI compliance offers an extra layer of protection: Based on the fields or patterns you can provide, we can mask or redact any sensitive PII (Personal Identifiable Information) that matches those fields or patterns, such as customer credit card data.

If enabled, Logz.io PCI compliance runs a regex pattern on select fields in your logs in search of matches and scrubs them of any sensitive customer data before they are indexed by Logz.io. The process occurs before the data is indexed in Elasticsearch and does not affect data archiving.

Logz.io’s PCI compliance solution is compatible with all levels, including the most stringent PCI level 1 requirements.

For more information on PCI compliance and DDS (Data Security Standard), see the PCI Security Standards Council’s resources.

To enable PCI compliance

Prerequisites

To ensure that we redact the necessary details, your organization is responsible for providing Logz.io with the required cardholder information guidelines in writing, including but not limited to:

  1. The relevant log types and accounts to mask
  2. The list of fields to mask
  3. The regular expression (regex) to identify the cardholder information and wHich fields the regex should run on
  4. The string to replace cardholder information with (for example, “CC_Number_Reduced”)
  5. Sample logs, with examples for each possible format where the PCI information may appear

In addition, you must notify Logz.io of any relevant changes in relation to the cardholder information guidelines that your organization transmits to Logz.io.

Select an account

You can control PCI compliance from > Settings > General in the navigation menu.

Account settings

If you have more than one account or a combination of sub accounts, you’ll need to repeat this process for each of them.

Request activation and accept the terms

Once you accept the legal terms and click activate, Logz.io Support will be automatically notified and your ticket will be created.

Account settings

Vetting the regex pattern

Support will get in touch to process your request. You’ll be asked to submit an appropriate regex pattern and specify which fields to apply it to.

Logz.io Support will test the regex expression to verify that it doesn’t interfere with the account’s normal operation and log ingestion. This might take several iterations.

Logiz.io Support cannot intervene with the creation of the appropriate regex pattern for reasons of liability.

Activate/Deactivate PCI compliance

Once the regex pattern is approved, the changes will be applied to your data parsing patterns and take effect on your account.

You can deactivate PCI compliance at any time. Go to > Settings > General in the navigation menu and click deactivate.