Ensure 'log_connections' is enabled

SedangLevel 1Otomatisyugabytedb

Deskripsi

Enabling the log_connections setting causes each attempted connection to the server to be logged, as well as successful completion of client authentication. This parameter cannot be changed after the session start. Runs ysqlsh (add the YugabyteDB bin directory to PATH) against PGHOST/PGPORT (default 127.0.0.1:5433) as PGUSER (default yugabyte); supply the password through PGPASSWORD or ~/.pgpass.

Cara pemeriksaan

Metode audit: Kueri SQL

sql_query

out=$(ysqlsh -h "${PGHOST:-127.0.0.1}" -p "${PGPORT:-5433}" -U "${PGUSER:-yugabyte}" -d "${PGDATABASE:-yugabyte}" -tAc "SHOW log_connections" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Output yang diharapkan: on

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Set it with the YB-TServer GFlag --ysql_pg_conf_csv="log_connections='on'" on every YB-TServer and restart it.

Properti

Sistem operasi: Apa saja
Tag: yugabytedblogging
Referensi: CIS YugabyteDB Benchmark v2.0.0 - 3.1.17 Ensure 'log_connections' is enabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target yugabytedb