Detections
Analytics
3.1.23 Ensure 'log_hostname' is set correctly
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Enabling the log_hostname setting causes the hostname of the connecting host to be logged in addition to the host's IP address for connection log messages. Disabling the setting causes only the connecting host's IP address to be logged, and not the hostname. Unless your organization's logging policy requires hostname logging, it is best to disable this setting so as not to incur the overhead of DNS resolution for each statement that is logged.Depending on your hostname resolution setup, enabling this setting might impose a non-negligible performance penalty. Additionally, the IP addresses that are logged can be resolved to their DNS names when reviewing the logs (unless dynamic hostnames are being used as part of your DHCP setup).
Solution
Execute the following SQL statement(s) to remediate this setting (in this example, to off ):postgres=# alter system set log_hostname='off';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)
See Also
Item Details
Audit Name: CIS PostgreSQL 17 v1.0.0 L1 PostgreSQL
References: CSCv7|5.1
Plugin: PostgreSQLDB
Control ID: 49f72b5ac44867930491a76da6250495a381c9d7db619c348349b5608b543f19