Azure Interactive signin has bad json string {PII Removed}

Cargill · Nov 14, 2024 · adb8d33 · adb8d33
1 parent 5f0f75a
commit adb8d33
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/processors/event_hub_audit_azure.event_hub_interactive_signin.conf b/config/processors/event_hub_audit_azure.event_hub_interactive_signin.conf
@@ -18,6 +18,7 @@ filter {
       "message", '\]"', ']',
       "message", '\}"', '}',
       "message", '"\{', '{'
+      "message", '{PII Removed}', '"PII Removed"'
     ]
   }
    json {