Re: Exclude certain application pgaudit logging? - Mailing list pgsql-general

From Adrian Klaver
Subject Re: Exclude certain application pgaudit logging?
Date
Msg-id 2beb61a5-903a-4caf-ac97-d4c2ef9b62f7@aklaver.com
Whole thread Raw
In response to Exclude certain application pgaudit logging?  (Ron Johnson <ronljohnsonjr@gmail.com>)
Responses Re: Exclude certain application pgaudit logging?
List pgsql-general
On 2/6/24 10:11 AM, Ron Johnson wrote:
> Currently, we use Object audit logging to capture all READ access to 
> columns FOO_1, FOO_2 and FOO_3 in table BAR.SCRABBLE.  (They are the 
> three columns have PII data.)


Using what audit software?


>
> The problem is that the application legitimately reads these columns 
> thousands of times per day.  Thus, the log fills up with meaningless 
> data that swamps any legitimate invalid accesses.


How do you know they are legitimate  requests?


>
> Thus, I'd like to exclude reads from "Postgresql JDBC Driver".  
> (Currently, I filter that out using "grep -v" in a shell script 
> that runs hourly from cron, but I find that unsatisfactory.)

-- 
Adrian Klaver
adrian.klaver@aklaver.com




pgsql-general by date:

Previous
From: Marcelo Marques
Date:
Subject: Re: Yum Update nothing provides libarmadillo.so.12()(64bit) needed by gdal36-libs-3.6.4-6PGDG.rhel9.x86_64 from pgdg-common
Next
From: Christophe Pettus
Date:
Subject: Re: Exclude certain application pgaudit logging?