Ensure that "log_checkpoints" server parameter is enabled for all PostgreSQL flexible database servers available within your Microsoft Azure cloud account. The "log_checkpoints" parameter allows checkpoints and restart points to be logged in the Azure PostgreSQL server log.
This rule resolution is part of the Conformity solution.
excellence
Checkpoints can disrupt your Azure PostgreSQL database performance and can cause connections to stall for up to a few seconds while they occur. By enabling the "log_checkpoints" parameter you can get verbose logging of the checkpoint process for your Azure PostgreSQL database servers. This logging data can be used to identify and troubleshoot sub-optimal PostgreSQL database performance.
Audit
To determine if the "log_checkpoints" parameter is enabled for your Azure PostgreSQL flexible database servers, perform the following operations:
Remediation / Resolution
To enable the "log_checkpoints" server parameter for all your Azure PostgreSQL flexible database servers, perform the following operations:
References
- Azure Official Documentation
- Monitor and tune Azure Database for PostgreSQL - Single Server
- Logs in Azure Database for PostgreSQL - Single Server
- Security Control V2: Logging and Threat Detection
- CIS Security Documentation
- Securing Microsoft Azure
- Azure Command Line Interface (CLI) Documentation
- az postgres flexible-server
- az postgres flexible-server list
- az postgres flexible-server parameter show
- az postgres flexible-server parameter set