PostgreSQL Log Min Duration Statement Flag Should Be -1
More Info:
PostgreSQL Log Min Duration Statement Flag Should Be -1Risk Level
MediumAddress
SecurityCompliance Standards
CISGCP, CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the PostgreSQL Log Min Duration Statement Flag misconfiguration in GCP using the GCP console, you can follow these steps:
- Log in to the GCP console and select the project where the PostgreSQL instance is located.
- In the navigation menu, go to SQL > PostgreSQL.
- Select the instance where the PostgreSQL Log Min Duration Statement Flag should be remediated.
- Click on the “Edit” button at the top of the page.
- Scroll down to the “Flags” section and look for the “log_min_duration_statement” flag.
- Change the value of the “log_min_duration_statement” flag to “-1”.
- Click the “Save” button to apply the changes.
- Verify that the PostgreSQL Log Min Duration Statement Flag has been successfully remediated by checking the PostgreSQL logs.
Using CLI
Using CLI
To remediate the PostgreSQL Log Min Duration Statement Flag misconfiguration for GCP using GCP CLI, follow these steps:The output should show the updated value of -1 for the PostgreSQL Log Min Duration Statement Flag.That’s it! You have successfully remediated the PostgreSQL Log Min Duration Statement Flag misconfiguration for GCP using GCP CLI.
- Open the Cloud Shell in your GCP console.
- Run the following command to authenticate your GCP account:
- Once you are authenticated, set the project where your PostgreSQL instance is located:
- Check the current value of the PostgreSQL Log Min Duration Statement Flag by running the following command:
- If the current value is not -1, update it by running the following command:
- Confirm the change by running the following command:
Using Python
Using Python
To remediate the PostgreSQL log_min_duration_statement flag misconfiguration in GCP using Python, follow these steps:Note: The These steps should remediate the PostgreSQL
- Import the necessary libraries:
- Authenticate with the GCP account using service account credentials:
- Retrieve the current value of the
log_min_duration_statementflag:
- If the current value is not
-1, update the flag to-1:
ALTER SYSTEM SET command updates the flag in the PostgreSQL configuration file, so the change will persist even if the database is restarted.- Restart the PostgreSQL service to apply the changes:
log_min_duration_statement flag misconfiguration in GCP using Python.