3.1.20 Ensure 'log_error_verbosity' is set correctly

Information

The log_error_verbosity setting specifies the verbosity (amount of detail) of logged messages. Valid values are:
* TERSE
* DEFAULT
* VERBOSE
with each containing the fields of the level above it as well as additional fields.
TERSE excludes the logging of DETAIL, HINT, QUERY, and CONTEXT error information.
VERBOSE output includes the SQLSTATE error code and the source code file name, function name, and line number that generated the error.
The appropriate value should be set based on your organization's logging policy.

Rationale:

If this is not set to the correct value, too many details or too few details may be logged.

Solution

Execute the following SQL statement(s) as superuser to remediate this setting (in this example, to verbose):

postgres=# alter system set log_error_verbosity = 'verbose';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)

Default Value:


DEFAULT

See Also

https://workbench.cisecurity.org/files/2407

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12, CSCv6|6, CSCv7|6.3

Plugin: PostgreSQLDB

Control ID: 9fbc7b5de5edc2a45df20f8b1b70f3bfc591c1dd93bcfa9efe42ead08804b3ad