PostgreSQL Logs

Evidence: PostgreSQL Logs
Description: Collect PostgreSQL Logs
Category: Applications
Platform: macos
Short Name: pgrl
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes

PostgreSQL database logs on macOS record database operations, queries, connections, authentication, and errors. Multiple PostgreSQL versions can coexist, and installation methods include system packages and Homebrew for different architectures.

This collector gathers structured data about postgresql logs.

This collector gathers PostgreSQL logs from system and Homebrew installations, supporting multiple PostgreSQL versions (postgresql, postgresql@14, etc.) across Intel and Apple Silicon architectures.

PostgreSQL logs are essential for investigating database attacks, SQL injection, unauthorized access, data exfiltration, and privilege escalation. They provide detailed query logs, connection information, and authentication history.