Ensure Log Rotation and Retention Settings Are Configured

中等級 1人工審核cockroachdb

說明

CockroachDB log rotation and retention must be configured to prevent uncontrolled growth and to preserve an appropriate history window. CockroachDB supports per-group rotation parameters that control both individual file size and total group retention. Each log file group can define: - max-file-size - maximum size of an individual log file before a new file is created.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Run cockroach debug check-log-config (or grep -A10 file-groups: /etc/cockroach/logging.yaml) and confirm each production file group has suitable max-file-size and max-group-size (defaults 10MiB / 100MiB). Check that the on-disk log directory holds enough history to meet the retention policy and that logs are shipped off-node.

修補方式

修補方法: 操作指南或基礎設施修補檔

1. Use defaults or define explicit rotation settings: If you do not configure a custom logging YAML, CockroachDB applies defaults of max- file-size: 10MiB and max-group-size: 100MiB to most file groups, which are acceptable for many small-to-medium deployments.

屬性

作業系統: 不限
標籤: cockroachdblogging
參考資料: CIS CockroachDB v25.x Benchmark v1.0.0 - 3.2 Ensure Log Rotation and Retention Settings Are Configured