diff --git a/config/processors/event_hub_audit_azure.event_hub_interactive_signin.conf b/config/processors/event_hub_audit_azure.event_hub_interactive_signin.conf
index 3464a31f..e921b854 100644
--- a/config/processors/event_hub_audit_azure.event_hub_interactive_signin.conf
+++ b/config/processors/event_hub_audit_azure.event_hub_interactive_signin.conf
@@ -18,6 +18,7 @@ filter {
       "message", '\]"', ']',
       "message", '\}"', '}',
       "message", '"\{', '{'
+      "message", '{PII Removed}', '"PII Removed"'
     ]
   }
    json {