TMA-POSTGRES-7.2
Ensure logging of replication commands is configured
LowLevel 1Manual reviewpostgres
Description
Enabling the log_replication_commands setting causes each attempted replication from the server to be logged.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run SHOW log_replication_commands; If replication is used and the value is off, replication commands are not logged and this is a fail.
How it is fixed
Fix method: Guidance or infrastructure patch
ALTER SYSTEM SET log_replication_commands = 'on'; SELECT pg_reload_conf();
Properties
- Operating systems
- Any
- Tags
- postgresdatabasereplicationloggingmanual
- Reference
- CIS PostgreSQL 18 Benchmark v1.0.0 - 7.2 Ensure logging of replication commands is configured