MIME-Version: 1.0
References: <CAKeSjMiBZuMX+R3mTmxj-5DUqKN9disMALRnTPv-5B3+CUn6Hg@mail.gmail.com>
 <CAKFQuwYNhgArOxhAXwbf3cY=jmJnKYo8c1R66NLFtAvpmKktCA@mail.gmail.com> <CAKeSjMgH1td7Vuz=h_Knf_bP7uBxjFRCHtuMi1Z2+phd3F7kRg@mail.gmail.com>
In-Reply-To: <CAKeSjMgH1td7Vuz=h_Knf_bP7uBxjFRCHtuMi1Z2+phd3F7kRg@mail.gmail.com>
From: "David G. Johnston" <david.g.johnston@gmail.com>
Date: Fri, 22 Nov 2024 09:15:22 -0700
Message-ID: <CAKFQuwYWegiCQeQWtEM6unoAis_R=1JKWxehwJM51LFXegreqg@mail.gmail.com>
Subject: Re: PostgreSQL Log Info
To: Jethish Jethish <jethish777@gmail.com>
Cc: pgsql-general@lists.postgresql.org
Content-Type: multipart/alternative; boundary="000000000000086090062782b38e"
Archived-At: <https://www.postgresql.org/message-id/CAKFQuwYWegiCQeQWtEM6unoAis_R%3D1JKWxehwJM51LFXegreqg%40mail.gmail.com>
Precedence: bulk

--000000000000086090062782b38e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, Nov 22, 2024 at 12:32=E2=80=AFAM Jethish Jethish <jethish777@gmail.=
com>
wrote:

> If an select query is fired I need the query returned values needs to be
> logged in my PostgreSQL log file.
>
Then the answer is no, and unlikely to become a feature anyone would
develop or that we'd accept.

A more innovative solution is going to need to be thought up to
satisfy the security people that want to know what data was acquired from
their system by either their users or semi-privileged hackers (privileged
exploits would likely just disable such logging anyway).  The space of
setting up a proxy server in between clients and the PostgreSQL server is
under-explored as a means by which to incorporate such functionality
externally to the core server.

David J.

--000000000000086090062782b38e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail_default" style=3D"fon=
t-family:arial,helvetica,sans-serif"><span style=3D"font-family:Arial,Helve=
tica,sans-serif">On Fri, Nov 22, 2024 at 12:32=E2=80=AFAM Jethish Jethish &=
lt;<a href=3D"mailto:jethish777@gmail.com">jethish777@gmail.com</a>&gt; wro=
te:</span></div></div><div class=3D"gmail_quote"><blockquote class=3D"gmail=
_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204=
,204);padding-left:1ex"><div dir=3D"auto"><p dir=3D"ltr">If an select query=
 is fired I need the query returned values needs to be logged in my Postgre=
SQL log file.</p></div></blockquote><div class=3D"gmail_default" style=3D"f=
ont-family:arial,helvetica,sans-serif">Then the answer is no, and unlikely =
to become a feature anyone would develop or that we&#39;d accept.</div><div=
 class=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif"><=
br></div><div class=3D"gmail_default" style=3D"font-family:arial,helvetica,=
sans-serif">A more innovative solution is going to need to be thought up to=
 satisfy=C2=A0the=C2=A0security people that want to know what data was acqu=
ired=C2=A0from their system by either their users or semi-privileged hacker=
s (privileged exploits would likely just disable such logging anyway).=C2=
=A0 The space of setting up a proxy server in between clients and the Postg=
reSQL server is under-explored as a means by which to incorporate such func=
tionality externally to the core server.</div><div class=3D"gmail_default" =
style=3D"font-family:arial,helvetica,sans-serif"><br></div><div class=3D"gm=
ail_default" style=3D"font-family:arial,helvetica,sans-serif">David J.</div=
></div></div>

--000000000000086090062782b38e--