DataDog Log Stream PII Obfuscation Does Not Mask Email in 'value' Field
Last Updated:
Overview
This article explains why user emails may not be masked by the Personal Identifiable Information (PII) obfuscation feature in DataDog Log Streams.
Applies To
- Auth0 Log Streams
- PII Obfuscation
Cause
This issue occurs when an email address is the value of a field named value within a log event, rather than a field explicitly named email. An example of the unmasked log structure is: {"type": "email", "value": "example@eg.com"}.
The PII obfuscation feature for Log Streams is designed to identify and mask sensitive data based on specific, predefined field names (e.g., email, user_id). It does not currently analyze the context of surrounding fields to identify PII. Therefore, when an email address is present in a field with a generic name like value, the system does not recognize it as PII and fails to obfuscate it.
Solution
Currently, Auth0's PII obfuscation feature for Log Streams does not support contextual analysis to mask data in generically named fields. This functionality is not available at this time.
Auth0 values customer feedback for future product enhancements. To recommend this idea as a future feature, please provide feedback to the Auth0 Product team by visiting the official feedback page:
