Nobody cares about database logging, but I really recommend enabling them to see what is happening behind the scenes (specially for web applications).
To enable on PostgreSQL (and be compatible with OSSEC):
# Adding the timestamp, hostname and database. log_line_prefix = '[%m] %h:%d ' # Recommended settings: log_connections = on log_disconnections = on log_duration = on # Maybe a good idea to reduce the default log level to info: client_min_messages = info log_min_messages = info # To enable query logging (all for everything or mod for inserts, updates, etc) log_statement = 'all'
To enable the generic Query log on MySQL (the error log in on by default), you need to start MySQL with –log:
/bin/sh /usr/bin/mysqld_safe --log
The best option is to modify /etc/init.d/mysqld (if using Centos) and inside the –log in there.
Nothing new, but I was searching for this information online and couldn’t find much info.