PostgreSQL servers should have 'log_disconnections' set to 'ON'
Enable log_disconnections on PostgreSQL Servers. The Azure Policy audits PostgreSQL databases without log_disconnections enabled. KICS checks that server parameter 'log_disconnections' is set to 'ON'.
What this control checks
PostgreSQL server parameter 'log_disconnections' must be set to 'ON'.
Common pitfalls
Value off, Off or OFF fails the check
An azurerm_postgresql_configuration resource with name "log_disconnections" and value "off", "Off" or "OFF" fails.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Disconnections should be logged for PostgreSQL database servers." (eb6f77b9-bd53-4e35-a23d-7f65d5f0e446); PowerPipe control azure_compliance.control.postgres_db_server_log_disconnections_on.
Scans of the Terraform code that flag the same setting before deployment: KICS query "PostgreSQL Log Disconnections Not Set" (07f7134f-9f37-476e-8664-670c218e4702).
Framework-specific interpretation
RBI IT Framework for NBFCs: Mapped to 3.1.g (Trails).
CIS Azure Benchmark v1.3.0: Mapped to 4.3.5 (Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v1.4.0: Mapped to 4.3.4 (Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v1.5.0: Mapped to 4.3.4 (Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v2.0.0: Mapped to 4.3.4 (Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v2.1.0: Mapped to 4.3.4 (Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v3.0.0: Mapped to 5.2.7 ([LEGACY]Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL single Server).
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.g Trails
- 4.3.5 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
- 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
- 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
- 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
- 4.3.4 Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL Database Server
- 5.2.7 [LEGACY]Ensure server parameter 'log_disconnections' is set to 'ON' for PostgreSQL single Server
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
postgres_db_server_log_disconnections_on - Powerpipe Control:
azure_compliance.control.postgres_db_server_log_disconnections_on - Azure Policy Definition:
eb6f77b9-bd53-4e35-a23d-7f65d5f0e446 - KICS Query:
07f7134f-9f37-476e-8664-670c218e4702
Last reviewed: 2026-10-14