PostgreSQL log retention is not enabled

ID

azure_postgresql_log_retention

Severity

low

Remediation Complexity

auto_fix

Remediation Risk

low

Remediation Effort

low

Vendor

Azure

Resource

Logging

Tags

ASVS50:v16.2.1, ASVS50:v16.3.1, non-reachable

Description

PostgreSQL log retention is not enabled. It is recommended to activate the log retention to get logging information.

For that you must configure the option log_retention=On.

Learn more about this topic at Azure PostgreSQL module.

Examples

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: Update PostgreSQL Server setting
      azure_rm_postgresqlconfiguration:
        resource_group: myResourceGroup
        server_name: myServer2
        name: log_retention
        value: Off

Mitigation / Fix

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: Update PostgreSQL Server setting
      azure_rm_postgresqlconfiguration:
        resource_group: myResourceGroup
        server_name: myServer2
        name: log_retention
        value: On