Ensure 'log_hostname' is set correctly

NiskaNivo 1Automatskayugabytedb

Opis

Enabling the log_hostname setting causes the hostname of the connecting host to be logged in addition to the host's IP address for connection log messages. Disabling the setting causes only the connecting host's IP address to be logged, and not the hostname. Runs ysqlsh (add the YugabyteDB bin directory to PATH) against PGHOST/PGPORT (default 127.0.0.1:5433) as PGUSER (default yugabyte); supply the password through PGPASSWORD or ~/.pgpass.

Kako se proverava

Metod provere: SQL upit

sql_query

out=$(ysqlsh -h "${PGHOST:-127.0.0.1}" -p "${PGPORT:-5433}" -U "${PGUSER:-yugabyte}" -d "${PGDATABASE:-yugabyte}" -tAc "SHOW log_hostname" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Očekivani izlaz: off

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Set it with the YB-TServer GFlag --ysql_pg_conf_csv="log_hostname='off'" on every YB-TServer and restart it.

Svojstva

Operativni sistemi: Bilo koji
Oznake: yugabytedblogging
Referenca: CIS YugabyteDB Benchmark v2.0.0 - 3.1.20 Ensure 'log_hostname' is set correctly

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target yugabytedb