<  Back to rules search

Server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server

azure.dbforpostgresql

Set up the azure.dbforpostgresql integration.

Description

Enable log_disconnections on PostgreSQL Servers.

Rationale

Enabling log_disconnections helps your PostgreSQL database to log the end of a session, including duration, which generates query and error logs. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.

Remediation

From the console

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to Azure Database for PostgreSQL server
  3. For each database, click on Server parameters
  4. Search for log_disconnections.
  5. Click ON and save.

Alternatively, use the Azure Command Line Interface and run the below command to update log_disconnections configuration:

az postgres server configuration set --resource-group <resourceGroupName> --server-name <serverName> --name log_disconnections --value on

References

  1. https://docs.microsoft.com/en-us/rest/api/postgresql/configurations/listbyserver
  2. https://docs.microsoft.com/en-us/azure/postgresql/howto-configure-server-parameters-using-portal
  3. https://docs.microsoft.com/en-us/azure/security/benchmarks/security-controls-v2-logging-threat-detection#lt-4-enable-logging-for-azure-resources

CIS Controls

Version 7 6.2 Activate logging: Ensure that local logging has been enabled on all systems and networking devices.