Detections
Analytics

3.1.22 Ensure 'log_error_verbosity' is set correctly

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The log_error_verbosity setting specifies the verbosity (amount of detail) of logged messages. Valid values are:

 - TERSE
 - DEFAULT
 - VERBOSE

with each containing the fields of the level above it as well as additional fields.

TERSE excludes the logging of DETAIL HINT QUERY and CONTEXT error information.

VERBOSE output includes the SQLSTATE error code, and the source code file name, function name, and line number that generated the error.

The appropriate value should be set based on your organization's logging policy.

If this is not set to the correct value, too many details or too few details may be logged.

Solution

Execute the following SQL statement(s) as superuser to remediate this setting (in this example, to verbose ):

postgres=# alter system set log_error_verbosity = 'verbose';
ALTER SYSTEM
postgres=# select pg_reload_conf();
 pg_reload_conf
----------------
 t
(1 row)

See Also

https://workbench.cisecurity.org/benchmarks/19478

Item Details

References: CSCv7|6.3

Plugin: PostgreSQLDB

Control ID: f525cd3bb98e3a32d61eca514773b31172e0bbf9a773ff8d791d0266c88e4a57