3.1.32 Ensure 'log_planner_stats' is disabled

Information

Enabling the log_planner_stats setting causes planner performance statistics to be written to the server log. This is a crude profiling instrument, similar to the Unix getrusage() operating system facility. This module reports per-module statistics. The planner performance statistics logging is disabled (off) by default and should only be enabled if directed to do so by your organization's logging policy.
Rationale:
The logging of these additional statistics when not mandated by your organization's logging policy greatly reduces the signal-to-noise ratio of the PostgreSQL logs.

Solution

Execute the following SQL statement(s) as superuser to remediate this setting:
postgres=# alter system set log_planner_stats = 'off';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)
Default Value:
off

See Also

https://workbench.cisecurity.org/files/2234

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-6, CSCv6|6, CSCv7|6

Plugin: PostgreSQLDB

Control ID: 80f6778d5d96baf5f56cb2ec1423f31cc4d2101c77ac0503348d7f5d3e77457d