Ensure syslog messages are not lost due to size

RendahLevel 1Otomatispostgres

Deskripsi

PostgreSQL log messages can exceed 1024 bytes, which is a typical size limit for traditional Syslog implementations. When syslog_split_messages is off, PostgreSQL server log messages are delivered to the Syslog service as is, and it is up to the Syslog service to cope with the potentially bulky messages. Runs psql as ${PGUSER:-postgres} against ${PGDATABASE:-postgres}; set PGHOST/PGPORT and use ~/.pgpass (not PGPASSWORD, see 1.6/1.7) when peer authentication is not available.

Cara pemeriksaan

Metode audit: Kueri SQL

sql_query

out=$(psql -X -U "${PGUSER:-postgres}" -d "${PGDATABASE:-postgres}" -tAc "SHOW syslog_split_messages" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Output yang diharapkan: on

Cara perbaikan

Metode perbaikan: Pernyataan SQL

shell

psql -X -U "${PGUSER:-postgres}" -c "ALTER SYSTEM SET syslog_split_messages = 'on'" -c "SELECT pg_reload_conf()"

Properti

Sistem operasi: Apa saja
Tag: postgresdatabaseloggingsyslog
Referensi: CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.12 Ensure syslog messages are not lost due to size

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target postgres