Description:

The log_connections server parameter in PostgreSQL controls whether the database logs successful client connection attempts. Enabling this parameter allows database administrators to monitor who is connecting to the server, from which IP addresses, and when. This is critical for auditing, security monitoring, and identifying unauthorized access attempts in Azure PostgreSQL Database Servers (Single or Flexible).


Rationale:

  • Security Monitoring: Logging connections provides visibility into client access patterns and helps detect unusual or suspicious activity.

  • Audit & Compliance: Supports regulatory requirements and internal policies for database access auditing (e.g., GDPR, HIPAA, PCI-DSS).

  • Troubleshooting: Helps diagnose connectivity issues by providing a record of all successful connections.


Impact:

  • Provides an audit trail of all connections to the PostgreSQL server.

  • Supports compliance and security reporting.

  • Enhances visibility into database access and operational activity.

  • Logging each connection increases log volume, which could impact storage usage if not managed.

  • Minimal performance overhead is associated with logging; usually negligible for most workloads.


Default Value:

For Azure Database for PostgreSQL (Single and Flexible Servers), the default value for log_connections is ON.


Pre-requisites:

  • Global Administrator or Security Administrator permissions.

  • Must be Azure Database for PostgreSQL – Flexible Server (or Single Server if the parameter is supported).


Test Plan:

  1. Sign in to the Azure Portal at https://portal.azure.com

  2. Search for and open the Azure Database for PostgreSQL

  3. Select the target PostgreSQL server

  4. From the left menu, select Server parameters

  5. Search for the parameter log_connections

  6. Verify log_connections is set to ON

  7. If log_connections is not set to ON, follow the implementation steps

Implementation Steps:

  1. Sign in to the Azure Portal at https://portal.azure.com

  2. Search for your Azure Database for PostgreSQL server.

  3. On the left-hand menu, under the Settings section, select server parameters.


                                       

  1. Search for log_connections. 

  2. Set the log_connections value to ON


  1. Save the changes


Backout Plan:

  1. Sign in to the Azure Portal at https://portal.azure.com

  2. Search for your Azure Database for PostgreSQL server.

  3. On the left-hand menu, under the Settings section, select server parameters.

  4. Search for log_connections.

  5. Set the log_connections value to OFF.

  6. Save the changes


Reference: