Does anyone have experience with anonymising DataPower information sent to IBM support?

Our potential clients are using DataPowers (without API Connect) to process a lot of sensitive data.

There are times when they have issues, they need to contact IBM support, and at these times,

they need to send files gathered from their appliances to IBM.

They would like to avoid sending sensitive information to IBM support and would like to know which information is necessary for IBM to help them resolve their issue.

The idea is to anonymise data before sending it to IBM.

We are in the process of finding out which kind of data they want to anonymise; however, they would like to have a list of data that is "absolutely required" by IBM to support them.

Is there a list of information that is required by IBM support when analysing a DataPower issue?

Thanks.

That's a pretty wide berth!  It depends upon the problem.

It is relatively easy to anonymize logs, but the error reports will be more challenging, and they almost always ask for those.

FWIW, Kumba Software's DPAA has an error report viewing feature, allowing you to see and compare contents of error reports.  That's not exactly what you need, but, the way it works is it pulls everything apart into individual files.   Maybe you could then scan those files, remove or anonymize what is necessary, and then reassemble??   Just an idea.

Does anyone have experience with anonymising DataPower information sent to IBM support?

Our potential clients are using DataPowers (without API Connect) to process a lot of sensitive data.

There are times when they have issues, they need to contact IBM support, and at these times,

they need to send files gathered from their appliances to IBM.

They would like to avoid sending sensitive information to IBM support and would like to know which information is necessary for IBM to help them resolve their issue.

The idea is to anonymise data before sending it to IBM.

We are in the process of finding out which kind of data they want to anonymise; however, they would like to have a list of data that is "absolutely required" by IBM to support them.

Is there a list of information that is required by IBM support when analysing a DataPower issue?

Thanks.

Thanks for the Idea.

I agree that it is quite a wide berth.

We are waiting for more information from clients to be able to help them.

That's a pretty wide berth!  It depends upon the problem.

It is relatively easy to anonymize logs, but the error reports will be more challenging, and they almost always ask for those.

FWIW, Kumba Software's DPAA has an error report viewing feature, allowing you to see and compare contents of error reports.  That's not exactly what you need, but, the way it works is it pulls everything apart into individual files.   Maybe you could then scan those files, remove or anonymize what is necessary, and then reassemble??   Just an idea.

Does anyone have experience with anonymising DataPower information sent to IBM support?

Our potential clients are using DataPowers (without API Connect) to process a lot of sensitive data.

There are times when they have issues, they need to contact IBM support, and at these times,

they need to send files gathered from their appliances to IBM.

They would like to avoid sending sensitive information to IBM support and would like to know which information is necessary for IBM to help them resolve their issue.

The idea is to anonymise data before sending it to IBM.

We are in the process of finding out which kind of data they want to anonymise; however, they would like to have a list of data that is "absolutely required" by IBM to support them.

Is there a list of information that is required by IBM support when analysing a DataPower issue?

Thanks.

I can't speak to all the data needed since we will need different data sets depending on the issue present.  The error report is usually our starting point because it gives a great breadth of information overall against the device health, services, activity.

Please consider not breaking the FirmwareVersion3 status provider, sometimes customers regex check for a IPv4 address x.x.x.x and they replace the firmware version info, breaking the ERTool ability to know what version your DataPower device is.  The combined error-report.txt.gz is processed through this same tool internally to review customer's error reports: https://github.com/ibm-datapower/ertool/

Also keep in mind any obfuscation of IP's makes it harder to give information about network routing issues, connection failures, so on.  So limiting information like that can be detrimental to the investigation.

Thanks for the Idea.

I agree that it is quite a wide berth.

We are waiting for more information from clients to be able to help them.

That's a pretty wide berth!  It depends upon the problem.

It is relatively easy to anonymize logs, but the error reports will be more challenging, and they almost always ask for those.

FWIW, Kumba Software's DPAA has an error report viewing feature, allowing you to see and compare contents of error reports.  That's not exactly what you need, but, the way it works is it pulls everything apart into individual files.   Maybe you could then scan those files, remove or anonymize what is necessary, and then reassemble??   Just an idea.

Does anyone have experience with anonymising DataPower information sent to IBM support?

Our potential clients are using DataPowers (without API Connect) to process a lot of sensitive data.

There are times when they have issues, they need to contact IBM support, and at these times,

they need to send files gathered from their appliances to IBM.

They would like to avoid sending sensitive information to IBM support and would like to know which information is necessary for IBM to help them resolve their issue.

The idea is to anonymise data before sending it to IBM.

We are in the process of finding out which kind of data they want to anonymise; however, they would like to have a list of data that is "absolutely required" by IBM to support them.

Is there a list of information that is required by IBM support when analysing a DataPower issue?

Thanks.