PostgreSQL
TMA-POSTGRES-3.1.2
Ensure the log destinations are set correctly
LowLevel 1Manual reviewpostgres
Description
PostgreSQL supports several methods for logging server messages, including stderr, csvlog, syslog, and jsonlog. On Windows, eventlog is also supported. One or more of these destinations should be set for server log output.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run SHOW log_destination; (default stderr) and confirm it contains every destination required by your logging policy (stderr, csvlog, jsonlog, syslog, eventlog). Missing required destinations are a fail.
How it is fixed
Fix method: Guidance or infrastructure patch
ALTER SYSTEM SET log_destination = 'csvlog'; (or a comma-separated list such as 'csvlog, syslog') then SELECT pg_reload_conf();
Properties
- Operating systems
- Any
- Tags
- postgresdatabaseloggingmanual
- Reference
- CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.2 Ensure the log destinations are set correctly