3.1.13 Ensure the correct messages are written to the server log

Information

The log_min_messages setting specifies the message levels that are written to the server log. Each level includes all the levels that follow it. The later the level, the fewer messages are sent.
Valid values are:
DEBUG5
DEBUG4
DEBUG3
DEBUG2
DEBUG1
INFO
NOTICE
WARNING
ERROR
LOG
FATAL
PANIC
WARNING is considered the best practice unless indicated otherwise by your organization's logging policy.
Rationale:
If this is not set to the correct value, too many messages or too few messages may be written to the server log.

Solution

Execute the following SQL statement(s) as superuser to remediate this setting (in this example, to set it to warning):
postgres=# alter system set log_min_messages = 'warning';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)
Default Value:
WARNING

See Also

https://workbench.cisecurity.org/files/2234

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CSCv6|6, CSCv7|6.4

Plugin: PostgreSQLDB

Control ID: 2d0035074b004cf2158b4866bb168f25e9d3a8ca7f59384024e873c4ac44b76e