Re: Help with configuring pgAudit

From: Joe Conway <mail(at)joeconway(dot)com>
To: Dave Hughes <dhughes20(at)gmail(dot)com>, Rajni Baliyan <saan654(at)gmail(dot)com>
Cc: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: Help with configuring pgAudit
Date: 2019-11-20 14:46:55
Message-ID: d12e4783-e9a6-b42f-9f1c-aeb0629b0738@joeconway.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 11/20/19 8:09 AM, Dave Hughes wrote:
> Hey,
> Thanks for reaching out.  It looks like I have that parameter set as
> well.  Here is a list of settings I have turned on in postgresql.conf
> since I installed pgAudit:
>
> shared_preload_libraries = 'pgaudit'
> log_destination = 'csvlog'
> logging_collector = on
> log_directory = '/work/PostgreSQL/10/data'
> log_filename = 'postgresql-%Y-%m-%d_%H%M%S.log'
> log_connections = on
> log_disconnections = on
> log_line_prefix = '<%m:%r:%u(at)%d:[%p]:>'
> pgaudit.log = 'ddl'
>
> Is there some other setting I may be missing?

I don't see anything wrong that jumps out except perhaps the OS postgres
user does not have sufficient permissions to write to
'/work/PostgreSQL/10/data'.

Beyond that, please see the supplemental PDF here for an example setup
instruction (section 2.2/appendix B, and possibly section 2.3 as well):

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_PostgreSQL_9-x_V1R6_STIG.zip

Also read through the pgaudit README if you have not already done so:

https://github.com/pgaudit/pgaudit

Finally (again if not already done), see the docs section on logging:

https://www.postgresql.org/docs/12/runtime-config-logging.html

HTH,

Joe

--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message stan 2019-11-20 15:01:27 Re: Making "invisible" characters visible ? (psql)
Previous Message Enrico Pirozzi 2019-11-20 14:37:01 Re: Foreign keys and locks.