YugabyteDB
TMA-YUGABYTEDB-3.1.8
Ensure syslog messages are not suppressed
LowLevel 1Manual reviewyugabytedb
Description
When logging to Syslog and this is on, then each message will be prefixed by an increasing sequence number.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run SHOW syslog_sequence_numbers; in ysqlsh. Where syslog is a log destination it must be on (the default), so that repeated messages are not suppressed by the syslog daemon; off is a finding.
How it is fixed
Fix method: Guidance or infrastructure patch
Set it with the YB-TServer GFlag --ysql_pg_conf_csv="syslog_sequence_numbers='on'" on every YB-TServer and restart it.
Properties
- Operating systems
- Any
- Tags
- yugabytedblogging
- Reference
- CIS YugabyteDB Benchmark v2.0.0 - 3.1.8 Ensure syslog messages are not suppressed