TMAegis
More rules for postgres

TMA-POSTGRES-7.2

Ensure logging of replication commands is configured

LowLevel 1Manual reviewpostgres

Description

Enabling the log_replication_commands setting causes each attempted replication from the server to be logged.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Run SHOW log_replication_commands; If replication is used and the value is off, replication commands are not logged and this is a fail.

How it is fixed

Fix method: Guidance or infrastructure patch

ALTER SYSTEM SET log_replication_commands = 'on'; SELECT pg_reload_conf();

Properties

Operating systems
Any
Tags
postgresdatabasereplicationloggingmanual
Reference
CIS PostgreSQL 18 Benchmark v1.0.0 - 7.2 Ensure logging of replication commands is configured