Ensure server parameter 'log_retention_days' is greater than 3 days for PostgreSQL Database Server

MEDIUM

Description

Description:

Enable 'log_retention_days' on 'PostgreSQL Servers'.

Rationale:

Enabling 'log_retention_days' helps PostgreSQL Database to 'Sets number of days a log file is retained' which in turn generates query and error logs. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.

Enabling this setting will enable logs to be retained for the number entered. If this is enabled for a high traffic server, the log may grow quickly to occupy a large amount of disk space. In this case you may want to set this to a lower number.

Remediation

From Azure Portal

  1. From Azure Home select the Portal Menu
  2. Go to 'Azure Database' for 'PostgreSQL server'
  3. For each database, click on 'Server parameters'
  4. Search for 'log_retention_days'.
  5. Enter value in range 4-7 (inclusive) and save.

From Azure CLI

Use the below command to update 'log_retention_days' configuration.

az postgres server configuration set --resource-group --server-name --name log_retention_days --value <4-7>