customer is worried about account numbers showing up in the error log when something goes wrong (like a say it smart error, or some other unexpected java runtime error).

I know how to disable logging of sensitive data in the activity log, but is there any way to disable logging of sensitive data from showing up in the error log?

If not, what would you recommend for companies where this is a security issue?

Thanks, Janine

Hi Janine,

The biggest issue with sensitive data tends to be recognition information from the ASR engine (e.g., "the caller said 9238"). The new activity log censoring addresses this concern.

However, it's less clear which sensitive data would appear in an error log. Do you have an example from an error log that we might be able to provide suggestions for?

Regards,
Vance

Hi Janine,

Thanks for the example.

The best bet in this case would be for your student to disable the default Error logger (this can be done in the project's properties in Call Studio), and create a custom Error logger that scrubs the output as desired. A simple approach might be to just censor all digit characters before writing them to the log, with something like "X".

Custom loggers have been available since Call Services 3.6, and VXML Server 4.0.

Regards,
Vance