Detections
Analytics

3.1.8 Ensure the maximum log file lifetime is set correctly

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

When logging_collector is enabled, the log_rotation_age parameter determines the maximum lifetime of an individual log file (depending on the value of log_filename ). After this many minutes have elapsed, a new log file will be created via automatic log file rotation. Current best practices advise log rotation

at least

daily, but your organization's logging policy should dictate your rotation schedule.

Log rotation is a standard best practice for log management.

Solution

Execute the following SQL statement(s) to remediate this setting (in this example, setting it to one hour):

postgres=# alter system set log_rotation_age='1h';
ALTER SYSTEM
postgres=# select pg_reload_conf();
 pg_reload_conf
----------------
 t
(1 row)

See Also

https://workbench.cisecurity.org/benchmarks/19478

Item Details

References: CSCv7|6.4

Plugin: PostgreSQLDB

Control ID: 442b53a4805b82645a120e61ee127d0cde0fc9965672d18d045a433c1665a7da