PostgreSQL 11 Administration Cookbook

Auditing SQL

There are two main ways to log SQL:

• Using the PostgreSQL log_statement parameter
• Using the pgaudit extension's pgaudit.log parameter

The log_statement parameter can be set to one of the following options:

• ALL: Logs all SQL statements executed at top level
• MOD: Logs all SQL statements for INSERT, UPDATE, DELETE, and TRUNCATE
• ddl: Logs all SQL statements for DDL commands
• NONE: No statements logged

For example, to log all DDL commands, edit your postgresql.conf file to set the following:

log_statement  =  'ddl'

The log_statement SQL statements are explicitly given in top-level commands. It is still possible to perform SQL without it being logged by this setting if you use any of the PL languages, either through DO statements or ...