3.1.10 Ensure the correct syslog facility is selected

Information

The syslog_facility setting specifies the syslog 'facility' to be used when logging to syslog is enabled. You can choose from any of the 'local' facilities:
LOCAL0
LOCAL1
LOCAL2
LOCAL3
LOCAL4
LOCAL5
LOCAL6
LOCAL7
Your organization's logging policy should dictate which facility to use based on the syslog daemon in use.
Rationale:
If not set to the appropriate facility, the PostgreSQL log messages may be intermingled with other applications' log messages, incorrectly routed, or potentially dropped (depending on your syslog configuration).

Solution

Execute the following SQL statement(s) to remediate this setting (in this example, setting it to the LOCAL1 facility):
postgres=# alter system set syslog_facility = 'LOCAL1';
ALTER SYSTEM
postgres=# select pg_reload_conf();
pg_reload_conf
----------------
t
(1 row)
Default Value:
LOCAL0

See Also

https://workbench.cisecurity.org/files/2235

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, 800-53|AU-12, CSCv6|6, CSCv7|6.2

Plugin: PostgreSQLDB

Control ID: dec88bf8158c7f336bc6b91798f0e426893d294298f573389f8dd6791a5da945