Skip to main content

PostgreSQL Server Parameter "log_checkpoints" Is Not Enabled

Overview​

Enabling log_checkpoints helps the PostgreSQL Database to Log each checkpoint in turn generates query and error logs. However, access to transaction logs is not supported. Query and error logs can be used to identify, troubleshoot, and repair configuration errors and sub-optimal performance.

Vendor​

Azure

Cloud Service​

PostgreSQL

CIS Azure v2.0.0 4.3.2

References​

https://docs.microsoft.com/en-us/rest/api/postgresql/singleserver/configurations/list-by-server, https://docs.microsoft.com/en-us/azure/postgresql/howto-configure-server-parameters-using-portal, https://docs.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-logging-threat-detection#lt-4-enable-logging-for-azure-resources, https://learn.microsoft.com/en-us/azure/postgresql/single-server/concepts-server-logs#configure-logging, https://learn.microsoft.com/en-us/powershell/module/az.postgresql/get-azpostgresqlconfiguration?view=azps-9.2.0#example-2-get-specified-postgresql-configuration-by-name, https://learn.microsoft.com/en-us/powershell/module/az.postgresql/update-azpostgresqlconfiguration?view=azps-9.2.0#example-1-update-postgresql-configuration-by-name

Severity​

4

Item Types​

Microsoft.DBforPostgreSQL.servers.databases