Detections
Analytics

3.1.13 Ensure the program name for PostgreSQL syslog messages are correct

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The syslog_ident setting specifies the program name used to identify PostgreSQL messages in syslog logs. An example of a possible program name is postgres

If this is not set correctly, it may be difficult or impossible to distinguish PostgreSQL messages from other messages in Syslog logs.

Solution

Execute the following SQL statement(s) to remediate this setting (in this example, assuming a program name of proddb ):

postgres=# alter system set syslog_ident = 'proddb';
ALTER SYSTEM
postgres=# select pg_reload_conf();
 pg_reload_conf
----------------
 t
(1 row)
postgres=# show syslog_ident;
 syslog_ident
--------------
 proddb
(1 row)

See Also

https://workbench.cisecurity.org/benchmarks/19478

Item Details

References: CSCv7|6.3

Plugin: PostgreSQLDB

Control ID: 26a3b7a50df17d7de30945be036db49c52794bb3087b89137f448b6d9b7683d1