Ensure the maximum log file size is set correctly

NiskaNivo 1Automatskayugabytedb

Opis

The log_rotation_size setting determines the maximum size of an individual log file. Once the maximum size is reached, automatic log file rotation will occur. Runs ysqlsh (add the YugabyteDB bin directory to PATH) against PGHOST/PGPORT (default 127.0.0.1:5433) as PGUSER (default yugabyte); supply the password through PGPASSWORD or ~/.pgpass. Passes when size-based rotation is enabled (log_rotation_size > 0, default 10MB); confirm the value matches the logging policy.

Kako se proverava

Metod provere: SQL upit

sql_query

out=$(ysqlsh -h "${PGHOST:-127.0.0.1}" -p "${PGPORT:-5433}" -U "${PGUSER:-yugabyte}" -d "${PGDATABASE:-yugabyte}" -tAc "SELECT CASE WHEN setting::bigint > 0 THEN 'compliant' ELSE 'disabled' END FROM pg_settings WHERE name = 'log_rotation_size'" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Set it with the YB-TServer GFlag --ysql_pg_conf_csv="log_rotation_size='1GB'" (or the value your policy requires) on every YB-TServer and restart it.

Svojstva

Operativni sistemi: Bilo koji
Oznake: yugabytedblogging
Referenca: CIS YugabyteDB Benchmark v2.0.0 - 3.1.6 Ensure the maximum log file size is set correctly

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target yugabytedb