TMA-POSTGRES-3.1.12
Ensure syslog messages are not lost due to size
낮음레벨 1자동postgres
설명
PostgreSQL log messages can exceed 1024 bytes, which is a typical size limit for traditional Syslog implementations. When syslog_split_messages is off, PostgreSQL server log messages are delivered to the Syslog service as is, and it is up to the Syslog service to cope with the potentially bulky messages. Runs psql as ${PGUSER:-postgres} against ${PGDATABASE:-postgres}; set PGHOST/PGPORT and use ~/.pgpass (not PGPASSWORD, see 1.6/1.7) when peer authentication is not available.
점검 방법
감사 방식: SQL 쿼리
sql_query
out=$(psql -X -U "${PGUSER:-postgres}" -d "${PGDATABASE:-postgres}" -tAc "SHOW syslog_split_messages" 2>/dev/null) || exit 1; printf '%s\n' "$out"- 예상 출력
on
조치 방법
조치 방식: SQL 문
shell
psql -X -U "${PGUSER:-postgres}" -c "ALTER SYSTEM SET syslog_split_messages = 'on'" -c "SELECT pg_reload_conf()"속성
- 운영 체제
- 모두
- 태그
- postgresdatabaseloggingsyslog
- 참고 자료
- CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.12 Ensure syslog messages are not lost due to size
이 호스트 점검하기
감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.
shell
tmaegis scan --target postgres