3.1.12 Ensure the correct messages are written to the server log

Information

The log_min_messages setting specifies the message levels that are written to the server log. Each level includes all the levels that follow it. The lower the level (vertically, below), the fewer messages are sent.
Valid values are:
* DEBUG5 <-- exceedingly chatty
* DEBUG4
* DEBUG3
* DEBUG2
* DEBUG1
* INFO
* NOTICE
* WARNING
* ERROR
* LOG
* FATAL
* PANIC <-- practically mute
WARNING is considered the best practice unless indicated otherwise by your organization's logging policy.

Rationale:

If this is not set to the correct value, too many messages or too few messages may be written to the server log.

Solution

Execute the following SQL statement(s) as superuser to remediate this setting (in this example, to set it to warning):

postgres=# alter system set log_min_messages = 'warning';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)

Default Value:

WARNING

See Also

https://workbench.cisecurity.org/files/2407

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CSCv6|6, CSCv7|6.4

Plugin: PostgreSQLDB

Control ID: 74fe0a8861a4da98517b2b1cea0779e121df4ca30013805af243808ef73e733b