Detections
Analytics
3.1.3 Ensure the logging collector is enabled
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
The logging collector is a background process that captures log messages sent to stderr and redirects them into log files. The logging_collector setting must be enabled in order for this process to run. It can only be set at the server start.The logging collector approach is often more useful than logging to syslog since some types of messages might not appear in syslog output. One common example is dynamic-linker failure message; another may be error messages produced by scripts such as archive_command
Note: This setting
must
be enabled when log_destination is either stderr or csvlog or logs
will be lost
. Certain other logging parameters require it as well.
Solution
Execute the following SQL statement(s) to remediate this setting:postgres=# alter system set logging_collector = 'on';
ALTER SYSTEM
Unfortunately, this setting can only be changed at the server (re)start. As root, restart the PostgreSQL service for this change to take effect:
# whoami
root
# systemctl restart postgresql-17
# systemctl status postgresql-17|grep 'ago$'
Active: active (running) since <date>; <count>s ago
See Also
Item Details
Audit Name: CIS PostgreSQL 17 v1.0.0 L1 PostgreSQL
References: CSCv7|6.2, CSCv7|6.3
Plugin: PostgreSQLDB
Control ID: cae0fc56a4c4e2cc927e8320b442eec94a71f112e13d64a15aad151b895e939e