Skip to main content

NoSQL: Options

Use the Sensitive Data Scan Settings (Options) page to configure additional settings for the sensitive data scan. It is a wizard page for the Sensitive Data Collection category.

NoSQL Data Collector Wizard Options page

The sensitive data scan settings are:

Scan Options

  • Data Settings:

    • Scan all documents for sensitive data — Scan all the documents in a collection in the targeted database or cluster
    • Limit of documents to scan — Scan limited number of documents in each database or cluster. This option is ideal when discovering sensitive data and has minimal impact on the MongoDB cluster performance. However, if you use the Subject Profile Request feature, Access Analyzer must scan all the documents in the database or cluster.
    • Scan documents randomly — Access Analyzer requests a set of documents from each database when scanning for sensitive data. The database engine doesn't return random data from a collection. Instead, Access Analyzer returns sequential documents in a collection. To ensure a statistical discrete uniform distribution of the scanned data, select this option. When selected, the Access Analyzer sensitive data scanner requests randomized documents from each collection in all the targeted databases.

  • Scan database names for sensitive data – Scans database names for sensitive data if the database names are included as part of the keyword list in the scanning criteria

  • Scan collection names for sensitive data – Scans collection names within the database for sensitive data if the collection names are included as part of the keyword list in the scanning criteria

DLP Options

  • Store discovered sensitive data – Stores potentially sensitive data in the Access Analyzer database. Any sampled sensitive data discovered based on the matched criteria is stored in the Access Analyzer database. Clear this checkbox to disable this functionality.

    note

    You must select the Store discovered sensitive data option to view Content Audit reports in the Access Information Center for MongoDB data.

    warning

    Changing scan options, criteria, or filters when resuming a scan may prevent the scan from resuming properly.

  • Resume scan from last point on error — Resumes scan from where the previous scan left off when an error stops the scan

tip

Remember, you need the Sensitive Data Discovery Add-on to use the sensitive data collection option.