3.1.12 Ensure the correct messages are sent to the database client

Information

The client_min_messages setting specifies the message levels that are sent to the database client (not the logs). Each level includes all the levels that follow it. The later the level, the fewer messages are sent. notice is generally accepted as the best practice for this setting.
Valid values are:
DEBUG5
DEBUG4
DEBUG3
DEBUG2
DEBUG1
LOG
NOTICE
WARNING
ERROR
FATAL
PANIC
Note: LOG has a different rank here than in log_min_messages.
Rationale:
If this is not set correctly, the database client may receive too many messages or too few messages.

Solution

Execute the following SQL statement(s) to remediate the setting (in this example, to notice):
postgres=# alter system set client_min_messages = 'notice';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)
Default Value:
notice

See Also

https://workbench.cisecurity.org/files/2234

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CSCv6|6, CSCv7|6.4

Plugin: PostgreSQLDB

Control ID: 3ed1d116b49115a501e14344d242366d2d586765150a6d62f3b4116dca98305e