3.1.9 Ensure the maximum log file size is set correctly

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The log_rotation_size setting determines the maximum size of an individual log file. Once the maximum size is reached, automatic log file rotation will occur.

Rationale:

If this is set to zero, the size-triggered creation of new log files is disabled. This will prevent automatic log file rotation when files become too large, which could put log data at increased risk of loss (unless age-based rotation is configured).

Solution

Execute the following SQL statement(s) to remediate this setting (in this example, setting it to 1GB):

postgres=# alter system set log_rotation_size = '1GB';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)

Default Value:

0

See Also

https://workbench.cisecurity.org/benchmarks/11866

Item Details

References: CSCv7|6.4

Plugin: PostgreSQLDB

Control ID: 577d0668aaf1a6823b861c80951c3a726d538a0290b1473089588092610a50e2