Control: 4.3.5 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
Description
It is recommended to enable log_disconnections on PostgreSQL Servers. Enabling log_disconnections helps PostgreSQL database to logs end of a session, including duration, which in turn generates query and error logs. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.
Remediation
From Console
- Login to Azure console and navigate to PostgreSQL Servers.
- For each database, go to
Settingssection from left pane. - Click on
Server parameters. - Search for
log_disconnections. - Click ON and save.
From Command Line
Command to update log_disconnections configuration
az postgres server configuration set --resource-group <resourceGroupName> --server-name <serverName> --name log_disconnections --value on
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v130_4_3_5Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v130_4_3_5 --shareSQL
This control uses a named query:
postgres_db_server_log_disconnections_on