Ensure the correct syslog facility is selected

LowLevel 1Manual reviewpostgres

Description

The syslog_facility setting specifies the syslog "facility" to be used when logging to syslog is enabled. You can choose from any of the 'local' facilities: ; LOCAL0 ; LOCAL1 ; LOCAL2 ; LOCAL3 ; LOCAL4 ; LOCAL5 ; LOCAL6 ; LOCAL7 Your organization's logging policy should dictate which facility to use based on the syslog daemon in use.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

If logging to syslog, run SHOW syslog_facility; (default local0) and confirm it is the facility your syslog policy assigns to PostgreSQL (LOCAL0-LOCAL7).

How it is fixed

Fix method: Guidance or infrastructure patch

ALTER SYSTEM SET syslog_facility = 'LOCAL1'; (example) then SELECT pg_reload_conf();

Properties

Operating systems: Any
Tags: postgresdatabaseloggingsyslogmanual
Reference: CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.10 Ensure the correct syslog facility is selected