Hi,
I have installed pgaudit, and configured as:
pgaudit.log = 'ddl,role'
pgaudit.log_level = 'log' (default)
Versions: postgresql96 (9.6.6) , pgaudit96 (1.0.4), postgis 2.3.2, Rhel 7.4
When I then install postgis extension in a database it writes a huge amount of
logs which slow down the server a lot.
Not only table creation and functions are logged, even all inserts in
spatial_ref_sys are written to the audit-log.
LOG: AUDIT: SESSION,1,1,DDL,CREATE FUNCTION,,,"
......
INSERT INTO ""spatial_ref_sys"" (""srid"",""auth_name"
....
This behaviour make pgaudit useless in our environment due to the overhead in
log-file write.
I have tried different combinations of pgaudit.log settings
(role,-functions), (role), and also changed pgaudit.log_level to warning, but
it was not better.
Does anybody have a useful pgaudit settings which not overflow the log files,
even when installing postgis or other extensions?
Also noticed that setting a session log to none (set pgaudit.log='none';)
overrides parameter from postgresql.conf, but does not get logged, and then
you can do whatever you want without any audit.
I supposed this changing of audit session log parameter should be logged to
file?
Regards,
Peter
