TMAegis
More rules for postgres

PostgreSQL

TMA-POSTGRES-3.1.13

Ensure the program name for PostgreSQL syslog messages is correct

LowLevel 1Manual reviewpostgres

Description

The syslog_ident setting specifies the program name used to identify PostgreSQL messages in syslog logs. An example of a possible program name is postgres.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

If logging to syslog, run SHOW syslog_ident; (default postgres) and confirm the program name matches your logging policy so messages from this cluster can be identified.

How it is fixed

Fix method: Guidance or infrastructure patch

ALTER SYSTEM SET syslog_ident = 'proddb'; (example) then SELECT pg_reload_conf();

Properties

Operating systems
Any
Tags
postgresdatabaseloggingsyslogmanual
Reference
CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.13 Ensure the program name for PostgreSQL syslog messages is correct