Dash0 acquires Polar Signals

Last updated:

Monitor Data Privacy

Verify that cardholder data redaction runs and distinguish scanned, redacted, and skipped telemetry using redaction metrics.

Cardholder data redaction records three metrics so you can prove the control ran and see what it did. All three are counters, so query them with increase() or rate(). They count items. An item is a log record, a span together with its events and links, or a metric data point.

Redaction counters

Use these counters to distinguish clean data from telemetry that was never scanned:

  • dash0.redaction.items_scanned: The number of items that redaction scanned. Without it, a redaction count of zero could mean clean data or a control that never ran.
  • dash0.redaction.items_redacted: The number of scanned items with at least one masked or replaced value in the item itself. An item counts once, however many of its values matched. Redaction still masks matches in resource and scope attributes, but does not count them against the items beneath them.
  • dash0.redaction.items_skipped: The number of items Dash0 did not scan at ingestion because an edge collector had already redacted them. Dash0 counts these only for datasets with Redact cardholder data enabled.

The ratio of dash0.redaction.items_redacted to dash0.redaction.items_scanned is the share of log records, spans, or data points that carried cardholder data.

Metric attributes

All three metrics carry these attributes:

  • dash0.redaction.signal: The signal type: logs, spans, or metrics. Web events count under logs.
  • dash0.signal_control.environment: Which part of the pipeline counted the item. edge means an edge collector, saas means Dash0 ingestion. Use it to tell edge and ingestion counts apart in one query.

dash0.redaction.items_redacted also carries dash0.redaction.detection_method, which says how redaction detected the matches in the item. value means the content itself validated as a card number or track record. key means a field name matched and redaction replaced the value without reading it. key_and_value means the item had matches of both kinds.

An edge collector records its metrics in the dataset named by the resource's dash0.dataset attribute, or in default when the resource has none.

Note

Dash0 no longer records the earlier metrics dash0.redaction.values_scanned and dash0.redaction.values_redacted, or their dash0.redaction.surface and dash0.redaction.match_kind attributes. Update any queries, dashboards, or check rules that use them.

Further Reading