Logging and monitoring
RDS PostgreSQL doesn’t have duration log
Risk Level
Informational (4)
Platform(s)
Compliance Frameworks
- CIS Alibaba Cloud Foundation Benchmark
Description
Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. Enabling 'log_duration' allows PostgreSQL Database to log the duration of each completed SQL statement, which results in query and error logs being generated. Configuration issues and inadequate performance can be identified, troubleshooted, and repaired using log data. It was found that the instance '{AliCloudRdsDbInstance}' has 'log_duration' set to 'off'.-
Recommended Mitigation
It is recommended to set the parameter 'log_duration' on the PostgreSQL instance to 'on'. To configure the PostgreSQL parameters, follow the instructions at: <a href="https://www.alibabacloud.com/help/doc-detail/96751.htm" target="_blank" rel="noopener noreferrer">https://www.alibabacloud.com/help/doc-detail/96751.htm</a>