pgaudit and create postgis extension logs a lot inserts
Hi,
I have installed pgaudit, and configured as:
pgaudit.log = 'ddl,role'
pgaudit.log_level = 'log' (default)
Versions: postgresql96 (9.6.6) , pgaudit96 (1.0.4), postgis 2.3.2, Rhel 7.4
When I then install postgis extension in a database it writes a huge amount of
logs which slow down the server a lot.
Not only table creation and functions are logged, even all inserts in
spatial_ref_sys are written to the audit-log.
LOG: AUDIT: SESSION,1,1,DDL,CREATE FUNCTION,,,"
..
INSERT INTO ""spatial_ref_sys"" (""srid"",""auth_name"
This behaviour make pgaudit useless in our environment due to the overhead in
log-file write.
I have tried different combinations of pgaudit.log settings
(role,-functions), (role), and also changed pgaudit.log_level to warning, but
it was not better.
Does anybody have a useful pgaudit settings which not overflow the log files,
even when installing postgis or other extensions?
Also noticed that setting a session log to none (set pgaudit.log='none';)
overrides parameter from postgresql.conf, but does not get logged, and then
you can do whatever you want without any audit.
I supposed this changing of audit session log parameter should be logged to
file?
Regards,
Peter
need help on memory allocation
Hi Team, we are seeing idle sessions consuming memory in our database, could you please help me how much memory an idle session can use max and how can we find how much work_mem consuming for single process. we are getting out of memory error,for this i'm asking above questions. Regards, Rambabu Vakada.
Re: pgaudit and create postgis extension logs a lot inserts
On 01/18/2018 04:12 AM, Svensson Peter wrote:
> When I then install postgis extension in a database it writes a huge
> amount of logs which slow down the server a lot.
> Not only table creation and functions are logged, even all inserts in
> spatial_ref_sys are written to the audit-log.
>
> LOG: AUDIT: SESSION,1,1,DDL,CREATE FUNCTION,,,"
> ..
> INSERT INTO ""spatial_ref_sys"" (""srid"",""auth_name"
>
>
> This behaviour make pgaudit useless in our environment due to the
> overhead in log-file write.
How often do you intend to install PostGIS? Disable pgaudit, install
PostGIS, enable pgaudit?
Joe
--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development
signature.asc
Description: OpenPGP digital signature
