MIME-Version: 1.0
References: <CAMon-aRf-XS+wVEnVvP58GtojYENywx+s9pUjwz5omADdLP1NA@mail.gmail.com>
In-Reply-To: <CAMon-aRf-XS+wVEnVvP58GtojYENywx+s9pUjwz5omADdLP1NA@mail.gmail.com>
From: Greg Sabino Mullane <htamfids@gmail.com>
Date: Tue, 18 Nov 2025 10:10:46 -0500
Message-ID: <CAKAnmmLRzMWc8qsKzu7uYoCVTm2fvME3+DqeeXcT6v1JCjiRPw@mail.gmail.com>
Subject: Re: Using pgAudit to audit interesting tables for all users except
 for batch user?
To: "Colin 't Hart" <colinthart@gmail.com>
Cc: PostgreSQL General <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="00000000000029473e0643dfe0c3"
Archived-At: <https://www.postgresql.org/message-id/CAKAnmmLRzMWc8qsKzu7uYoCVTm2fvME3%2BDqeeXcT6v1JCjiRPw%40mail.gmail.com>
Precedence: bulk

--00000000000029473e0643dfe0c3
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Tue, Nov 18, 2025 at 4:18=E2=80=AFAM Colin 't Hart <colinthart@gmail.com=
> wrote:

> alter user <batchuser> set pgaudit.log to 'none';
>

That's close! pgaudit.log deals with session level things, but you want to
exclude object-level things. Try:

create role skip_pguadit;
alter user <batchuser> set pgaudit.role =3D 'skip_pgaudit';


Cheers,
Greg

--
Crunchy Data - https://www.crunchydata.com
Enterprise Postgres Software Products & Tech Support

--00000000000029473e0643dfe0c3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Tue, Nov 18, 2025 at 4:18=E2=80=AFAM C=
olin &#39;t Hart &lt;<a href=3D"mailto:colinthart@gmail.com">colinthart@gma=
il.com</a>&gt; wrote:</div><div class=3D"gmail_quote gmail_quote_container"=
><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border=
-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div>al=
ter user &lt;batchuser&gt; set pgaudit.log to &#39;none&#39;;</div></div></=
blockquote><div><br></div><div>That&#39;s close! pgaudit.log deals with ses=
sion level things, but you want to exclude object-level things. Try:</div><=
div><br></div><div>create role skip_pguadit;</div><div>alter user &lt;batch=
user&gt; set pgaudit.role =3D &#39;skip_pgaudit&#39;;</div><div><br></div><=
div><br></div></div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"=
ltr"><div>Cheers,</div><div>Greg</div><div><br></div><div>--</div><div>Crun=
chy Data - <a href=3D"https://www.crunchydata.com" target=3D"_blank">https:=
//www.crunchydata.com</a></div><div>Enterprise Postgres Software Products &=
amp; Tech Support</div><div><br></div></div></div></div>

--00000000000029473e0643dfe0c3--