Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e2NDh-0008S3-FN for pgsql-admin@arkaria.postgresql.org; Wed, 11 Oct 2017 20:03:09 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1e2NDh-00087w-29 for pgsql-admin@arkaria.postgresql.org; Wed, 11 Oct 2017 20:03:09 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1e2NBr-0003Dd-EC for pgsql-admin@postgresql.org; Wed, 11 Oct 2017 20:01:15 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1e2NBp-0006Tz-83 for pgsql-admin@postgresql.org; Wed, 11 Oct 2017 20:01:14 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id v9BK1A3w023673; Wed, 11 Oct 2017 16:01:10 -0400 From: Tom Lane To: Ervin Weber cc: Alvaro Herrera , Don Seiler , pgsql-admin Subject: Re: Passwords in clear text in server log In-reply-to: References: <20171011194323.s2alxtl3krdvj7hj@alvherre.pgsql> Comments: In-reply-to Ervin Weber message dated "Wed, 11 Oct 2017 22:46:44 +0300" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <23671.1507752070.1@sss.pgh.pa.us> Content-Transfer-Encoding: quoted-printable Date: Wed, 11 Oct 2017 16:01:10 -0400 Message-ID: <23672.1507752070@sss.pgh.pa.us> List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org Ervin Weber writes: > Alvaro Herrera wrote: >> Actually, I do wonder why we log statements that fail to parse. Surely >> the client ought to know that it failed, but what is the value of >> additionally storing the query in the server log? > To debug clients who claim it is working on their end, but data does not = change. We have heard many times from people who don't have enough insight, or enough debug support client-side, to know exactly what queries their apps are issuing. Disabling query logging would be a horrible setback for debuggability of such apps. How many times have you said "consult the postmaster log to find out what's going on"? regards, tom lane --=20 Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin