TMA-YUGABYTEDB-3.1.1
Ensure the log destinations are set correctly
Description
YugabyteDB by default supports logging server messages to stderr. Assessed manually here: the benchmark check is environment-specific and cannot be evaluated reliably by a single command.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run SHOW log_destination; in ysqlsh. The value (default stderr) must include every log destination your organisation logging policy requires (e.g. stderr, csvlog, syslog). Missing required destinations are a finding.
How it is fixed
Fix method: Guidance or infrastructure patch
Use the yb-tserver binary and its flags to configure the YB-TServer server. Add the following GFLAG to YB-TServer: ./bin/yb-tserver --ysql_pg_conf_csv="log_destination='stderr'"
Properties
- Operating systems
- Any
- Tags
- yugabytedblogging
- Reference
- CIS YugabyteDB Benchmark v2.0.0 - 3.1.1 Ensure the log destinations are set correctly