Subject: Re: pgaudit and create postgis extension logs a lot inserts
To: Svensson Peter <peter.svensson@smhi.se>,
 "pgsql-performance@postgresql.org" <pgsql-performance@postgresql.org>
References: 
 <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se>
From: Joe Conway <mail@joeconway.com>
Openpgp: id=4EA5B4659ED59CC9538139A5332B7E68B699434A
Message-ID: <514a9172-df28-56ab-ee65-2c01e5cbeb6a@joeconway.com>
Date: Thu, 18 Jan 2018 08:54:21 -0800
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.5.0
MIME-Version: 1.0
In-Reply-To: 
 <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se>
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="CHSJYY0PfzuvBCDd0IzGt3kngTZ2cudJt"
Precedence: bulk

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--CHSJYY0PfzuvBCDd0IzGt3kngTZ2cudJt
Content-Type: multipart/mixed; boundary="TxYwKodpdvnmN26xG7WKvK2jvFU5AOVAT";
 protected-headers="v1"
From: Joe Conway <mail@joeconway.com>
To: Svensson Peter <peter.svensson@smhi.se>,
 "pgsql-performance@postgresql.org" <pgsql-performance@postgresql.org>
Message-ID: <514a9172-df28-56ab-ee65-2c01e5cbeb6a@joeconway.com>
Subject: Re: pgaudit and create postgis extension logs a lot inserts
References: <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se>
In-Reply-To: <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se>

--TxYwKodpdvnmN26xG7WKvK2jvFU5AOVAT
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

On 01/18/2018 04:12 AM, Svensson Peter wrote:
> When I then install=C2=A0 postgis extension in a database it writes a h=
uge
> amount of logs which slow down the server a lot.
> Not only table creation and functions are logged,=C2=A0 even=C2=A0 all =
inserts in=C2=A0
> spatial_ref_sys are written to the audit-log.
>=20
> LOG:=C2=A0 AUDIT: SESSION,1,1,DDL,CREATE FUNCTION,,,"
> ......
> INSERT INTO ""spatial_ref_sys"" (""srid"",""auth_name"
> ....
>=20
> This behaviour make pgaudit useless in our environment due to the
> overhead in log-file write.

How often do you intend to install PostGIS? Disable pgaudit, install
PostGIS, enable pgaudit?

Joe

--=20
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development


--TxYwKodpdvnmN26xG7WKvK2jvFU5AOVAT--

--CHSJYY0PfzuvBCDd0IzGt3kngTZ2cudJt
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=snIK
-----END PGP SIGNATURE-----

--CHSJYY0PfzuvBCDd0IzGt3kngTZ2cudJt--