How to enable capturing of SQL bind variables? (Values are masked)

[HuseynNajafli]

Hi everyone,

I'm currently trying to analyze database performance, but Dynatrace is masking all SQL parameters/values (Oracle, PostgreSQL, MSSQL, MySQL) in the "Database Statements" view. Every value appears as *****.

I understand this is likely a security/privacy feature, but I have the necessary permissions and need to view these values to identify specific problematic queries.

I checked the Global Settings > Preferences > Data Privacy and Server-side service monitoring > Deep monitoring sections, but I couldn't get it to work.

Is there a specific toggle or a "Request Attribute" configuration I am missing to reveal these SQL bind variables?

Best regards,

Huseyn Najafli

[AntonPineiro]

Hi,

Just folllowing this. And you will be able to see bind variables in trace section.

Double check which process you have just applied it and which database framework you are using:

Best regards

[Julius_Loman]

One needs to separate bind variables (represented by ? in the query) from SQL query literals (masked by * in the query) . Dynatrace allows capturing of bind variables only, literals (values directly in the query) are always masked for normalization (and security) purposes and cannot be "unmasked".

Also, keep in mind that capturing bind variables may result in significantly larger trace data (trace storage in Managed) and increased overhead. I recommend enabling it just for the process groups where it is needed.

If you need SQL literal values, the best way is to capture the values from code using resource attributes. However, this needs an understanding of your code and might not be easy and might require code modifications in some cases.