Predictive Diagnostic Cloud Data Flow and Data Security
Pega Predictive Diagnostic Cloud (PDC) receives, analyzes, and stores data that Pega Platform™ sends. The application gathers that information from several data sources as summary statistics or individual data. Pega Platform does not send any Personally Identifying Information (PII) to PDC. Through a web-based portal, PDC provides a holistic view into the inner workings of your applications built on Pega Platform.
Each Pega Platform client has a dedicated PDC virtual user account that is called a tenant. Each tenant can monitor any number of applications that belong to the same client. The PDC service in Pega Platform provides a one-way data push that sends alerts and diagnostic data through Amazon Simple Queue Service (SQS) asynchronously, which prevents your systems from slowing. After receiving the data, PDC identifies issues in your system and can send you notifications about events that are critical to your business.
Your system does not require any additional software. Pega Platform versions 8.4 or later include monitoring agents that use the PegaAESRemote ruleset to send specific data to PDC. The PegaAESRemote ruleset is present in Pega Platform and you upgrade it with Pega Platform service packs. PDC receives weekly updates.
In the following image, click the + icons to learn more about the PDC data flow:
PDC creates output that helps you to understand your data.
In the following image, click the + icons to learn more about PDC output:
Check your knowledge with the following interaction:
PDC Data collection
PDC collects diagnostic data to understand how applications are performing. This data consists of events, which are alerts and exceptions, and system metrics. PDC never collects PII.
Check your knowledge with the following interaction:
PDC Data security
PDC is built on Pega Platform and resides in a dedicated private cloud in Pega Cloud® services. Customers have access only to their system data, based on their unique URL, and cannot see other customers' information or data.
PDC maintains the security of your data in the following ways:
- The flow of information between your monitored application and PDC is one-way. Pega Platform pushes data to PDC, but PDC does not access any systems.
- To encrypt all communication with PDC, the data passes through a SOAP protocol over HTTPS.
- You can enhance the data authentication and origin verification process by requiring an additional digital signature to include with every message. The signature is unique for each system that PDC monitors and ensures the origin of every message that PDC receives.
- PDC does not collect PII, with the exception of user IDs. For further security, you can enable the operator privacy mode. As a result, each operator ID is immediately replaced with an encrypted hash.
- If you configure a monitored system to include SQL bind variables in SQL-related alerts, then the alert log might contain these variables. To increase privacy, PDC does not accept the bind variables and replaces them with question marks.
- If you have exceptionally high-security requirements, you can suppress all parameter pages in alerts. However, this approach decreases the quality of advice that PDC provides.
- Pega Platform uses an allow list for sending clipboard parameter data. Pega Platform only sends the parameters that are required for analysis and that have content that is known and safe. If a parameter is not listed as safe, Pega Platform removes the parameter name value.
- The main purpose of PDC is to help you identify and resolve current and recent issues. Depending on the type of information, PDC stores raw data only for a limited time, and then purges the data from the database. In most cases, PDC retains data for 14 days. The PDC documentation provides the data retention policy for different types of data.
For more information, see the following PDC documentation topics:
Check your knowledge with the following interaction:
This Topic is available in the following Module:
Want to help us improve this content?