Plugin Title Log Duration Enabled
Cloud AZURE
Category PostgreSQL Server
Description Ensures connection duration logs are enabled for PostgreSQL servers
More Info Connection duration logs log duration times of connections to the server and can be used to locate suspicious long-running connections.
AWS Link https://docs.microsoft.com/en-us/azure/postgresql/howto-configure-server-parameters-using-portal
Recommended Action Ensure the server parameters for each PostgreSQL server have the log_duration setting enabled.


Detailed Remediation Steps

  1. Log into the Microsoft Azure Management Console.
  2. Select the "Search resources, services, and docs" option at the top and search for PostgreSQL.
  3. On the "Azure Database for PostgreSQL servers" page, select the database by clicking on the "Name" as a link that needs to be examine.
  4. Scroll down the left navigation panel and choose "Server parameters" under "Settings."
  5. On the "Server parameters" page, search for "log_duration" paramter using the "Search for filter item search box." If the value is set to "OFF" then the "log-duration" is not enabled for PostgreSQL servers.
  6. Repeat steps number 2 - 5 to verify other "PostgreSQL" databases in the account.
  7. Navigate to "PostgreSQL", select the database by clicking on the "Name" and choose "Server parameters" under "Settings" from the left navigation panel.
  8. On "Server Parameter" page, search for "log_duration" paramter using the "Search for filter item search box" and enable it by selecting "ON" from the toggle configuration button.
  9. Click on the "Save" button at the top to make the changes.
  10. Repeat steps number 7 - 9 to ensure the server parameters for each PostgreSQL server have the log_duration setting enabled.

Want to scan for this risk automatically?

Get Started Now