Detections
Analytics

3.1.14 Ensure the correct messages are written to the server log

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The log_min_messages setting specifies the message levels that are written to the server log. Each level includes all the levels that follow it. The lower the level (vertically, below), the fewer messages are logged.

Valid values are:

 - DEBUG5 <-- exceedingly chatty
 - DEBUG4
 - DEBUG3
 - DEBUG2
 - DEBUG1
 - INFO
 - NOTICE
 - WARNING <-- default
 - ERROR
 - LOG
 - FATAL
 - PANIC <-- practically mute

WARNING is considered the best practice unless indicated otherwise by your organization's logging policy.

If this is not set to the correct value, too many or too few messages may be written to the server log.

Solution

Execute the following SQL statement(s) as superuser to remediate this setting (in this example, to set it to warning ):

postgres=# alter system set log_min_messages = 'warning';
ALTER SYSTEM
postgres=# select pg_reload_conf();
 pg_reload_conf
----------------
 t
(1 row)

See Also

https://workbench.cisecurity.org/benchmarks/19478

Item Details

References: CSCv7|6.4

Plugin: PostgreSQLDB

Control ID: 0282a21a8b4f385e344dc48289cdcd4a22c0d5337d3628e4d1ea7f9d16c135ab