Data Loss Prevention

 View Only

 Clarification on Data Normalizer in Custom Data Identifiers

Nguyen Nghia's profile image
Nguyen Nghia posted Feb 21, 2026 08:28 AM

Hi everyone,

I’m working with custom data identifiers in Symantec DLP and I’m trying to better understand the role of the Data Normalizer. From the documentation, I see that when creating a custom identifier you must define at least one pattern and select a normalizer, with validators being optional.

My question is: does the normalizer act on the raw data before the regex pattern is applied, or does it process the data after the pattern has matched? For example, if I define a pattern that captures digit sequences and select “Digits” as the normalizer, is the normalizer cleaning up the candidate match so that validators (like Luhn check) can work on it?

I’ve noticed in the interface that you can have “Digits” as the normalizer but then use validators like keyword checks, which don’t seem to rely on numeric formatting. That makes me wonder if the normalizer is always applied regardless of validator type, or only when the validator requires normalized input.

Could someone clarify the exact sequence of operations (Pattern → Normalizer → Validator) and how normalizers interact with validators such as keyword checks?

Thanks in advance for any insights!