Detailed breakdown of gathered data¶
GNU/Linux operating system ### barman crontab/cron (barman_crontab_cron )¶
Description¶
Output from crontab -l , if running as barman. Content of
/etc/cron.d/barman , if it exists.
Report output¶
File
/linux/barman_cron.data: Content of/etc/cron.d/barman, if it existsFile
/linux/barman_crontab.data: Output frombarman crontab -l, if barman user
Depth¶
Surface
Security impact¶
Low — Might have entries in crontab/cron with sensitive data
debug_sources (debug_sources )¶
Description¶
Counts files under /usr/src/debug to detect the application source
code present in the system and ease live debugging
Report output¶
File /linux/debug_sources.data : Sources for GNU debugger
Depth¶
Surface
Security impact¶
Low — No known security impact
EFM CLI (efm_cli )¶
Description¶
Gets output of efm cluster-status command
Report output¶
File /tools/efm/cli/cluster_status.out : Output of
efm cluster-status <cluster_name> command
Depth¶
Surface #### Security impact
Low — No known security impact.
EFM configuration (efm_configuration )¶
Description¶
EFM properties and nodes configuration files
Report output¶
File
/tools/efm/config/efm.nodes: EFM nodes fileFile
/tools/efm/config/efm.properties: EFM properties file
Depth¶
Surface #### Security impact
Low — No known security impact.
EFM systemctl (efm_systemctl )¶
Description¶
When EFM services are detected, collects status and cat of the
corresponding services. Checks for any service whose name starts with
edb-efm- .
Report output¶
File
/tools/efm/systemd/<service_name>_cat.data: Output of ’systemctl catFile
/tools/efm/systemd/<service_name>_status.data: Output of ’systemctl status
Depth¶
Surface
Security impact¶
Low — No known security impact.
etcd CLI (etcd_cli )¶
Description¶
Gathers the output of some etcdctl commands, if etcdctl is available in
the server. The commands are endpoint status and endpoint health
.
Report output¶
File
/tools/etcd/cli/endpoint_status.out: Output ofetcdctl endpoint statuscommandFile
/tools/etcd/cli/endpoint_health.out: Output ofetcdctl endpoint healthcommand
Depth¶
Surface
Security impact¶
Low — No known security impact.
etcd configuration (etcd_configuration )¶
Description¶
Collects etcd configuration file that’s found in the server
Report output¶
File /tools/etcd/config/<basename> : etcd configuration file
Depth¶
Surface
Security impact¶
Low — No known security impact.
etcd systemctl (etcd_systemctl )¶
Description¶
When etcd services are detected, collects status and cat of the
corresponding services. Checks for any service whose name starts with
etcd .
Report output¶
File
/tools/etcd/systemd/<service_name>_cat.data: Output of ’systemctl catFile
/tools/etcd/systemd/<service_name>_status.data: Output of ’systemctl status
Depth¶
Surface
Security impact¶
Low — No known security impact.
HARP CLI (harp_cli )¶
Description¶
Gathers output of a few harpctl command outputs using the config.yml
file that’s found in the server. The commands are: cluster ,
proxies , locations , nodes , and version .
Report output¶
File
/tools/harp/cli/version.out: Output ofharp -f <conf_file_path> versioncommandFile
/tools/harp/cli/proxies.out: Output ofharp -f <conf_file_path> get proxies -o yamlcommandFile
/tools/harp/cli/nodes.out: Output ofharp -f <conf_file_path> get nodes -o yamlcommandFile
/tools/harp/cli/locations.out: Output ofharp -f <conf_file_path> get locations -o yamlcommandFile
/tools/harp/cli/cluster.out: Output ofharp -f <conf_file_path> get cluster -o yamlcommand
Depth¶
Surface
Security impact¶
Low — No known security impact.
HARP configuration (harp_configuration )¶
Description¶
Collects HARP configuration file that’s found in the server
Report output¶
File
/tools/harp/config/harp.cluster.init.yml: HARP bootstrap configuration fileFile
/tools/harp/config/<basename>: HARP configuration file
Depth¶
Surface
Security impact¶
Low — No known security impact.
HARP systemctl (harp_systemctl )¶
Description¶
When HARP services are detected, collects status and cat of the
corresponding services. Checks for any service whose name starts with
harp .
Report output¶
File
/tools/harp/systemd/<service_name>_cat.data: Output of ’systemctl catFile
/tools/harp/systemd/<service_name>_status.data: Output of ’systemctl status
Depth¶
Surface
Security impact¶
Low — No known security impact.
Block devices layout (linux_block_devices_layout )¶
Description¶
Information on block devices layout from the lsblk command
Report output¶
File /linux/lsbk.data : lsbk command output
Depth¶
Surface
Security impact¶
Low — No known security impact.
Processor governor (linux_cpu_governor )¶
Description¶
Processor scaling governor from the files in /sys/devices/system/cpu
Report output¶
File
/linux/sys/energy_perf_bias.data: Intel Performance and Energy Bias attributesFile
/linux/sys/intel_pstate.data: Intel pstate configurationFile
/linux/sys/cpu_scaling_driver.data: available CPU scaling driverFile
/linux/sys/cpu_scaling_available_governors.data: available CPU scaling governorsFile
/linux/sys/cpu_scaling_governor.data: active CPU scaling governor
Depth¶
Surface
Security impact¶
Low — No known security impact.
Mounted file systems and available space (linux_devices_info )¶
Description¶
Lists mounted filesystems through the mount command and free space
using df
Report output¶
File
/linux/diskspace.data: amount of available disk spaceFile
/linux/mount.data: Output of themountcommand
Depth¶
Surface
Security impact¶
Low — No known security impact.
File systems configuration (linux_disk_configuration )¶
Description¶
Disk configuration obtained through the /etc/fstab file
Report output¶
File /linux/fstab.data : contents of /etc/fstab
Depth¶
Surface
Security impact¶
Low — No known security impact.
OS distribution, kernel and device data (linux_distro_collector )¶
Description¶
Information about the Linux distribution currently in use, as returned
by the lsb_release command
Report output¶
File
/linux/release.data: The Linux distribution currently in useFile
/linux/release_source.data: The name of the collected file or the executed command
Depth¶
Surface
Security impact¶
Low — No known security impact.
Hardware (linux_hardware_info )¶
Description¶
Hardware info through lspci
Report output¶
File /linux/lspci.data : Hardware info from lspci
Depth¶
Surface
Security impact¶
Low — No known security impact.
Hypervisor (linux_hypervisor_collector )¶
Description¶
Information about the type of virtualization used, as returned by the
systemd-detect-virt command
Report output¶
File /linux/hypervisor.data : The name of the collected file or the
executed command
Depth¶
Surface
Security impact¶
Low — No known security impact.
Kernel (linux_kernel_info )¶
Description¶
Kernel info, transparent huge pages status, and disk scheduler
configuration obtained by combining the output of the commands uname
and ipcs with the contents of the /proc and /sys filesystems
Report output¶
File
/linux/read_ahead.data: Info on the read aheadFile
/linux/schedulers.data: Scheduler info from/sysdirFile
/linux/sys/kernel_mm_transparent_hugepage.data: Transparent huge pages infoFile
/linux/ipcs.data:ipcscommand outputFile
/linux/uname.data:unamecommand output
Depth¶
Surface
Security impact¶
Low — No known security impact.
Kernel limits (linux_kernel_limits )¶
Description¶
Configuration file for the pam_limits module
Report output¶
File /linux/limits.data : content of the limits.conf file
Depth¶
Surface
Security impact¶
Low — No known security impact.
Processor usage statistics (linux_mpstat )¶
Description¶
Processor statistics from the mpstat command.
Report output¶
File /linux/mpstat.data : Output from ‘mpstat -P ALL 1 10’
Depth¶
Surface
Security impact¶
Low — No known security impact.
Network interfaces (linux_network_interfaces )¶
Description¶
Network interface information from the ip and ifconfig commands
Report output¶
File
/linux/ifconfig.data: Output from ‘ifconfig’File
/linux/ip_address_list.data: Output from ‘ip address list’
Depth¶
Surface
Security impact¶
Low — No known security impact.
Installed packages via rpm or dpkg (linux_packages_info )¶
Description¶
Information about the system packages installed using rpm or
dpkg
Report output¶
File
/linux/packages-dpkg.data: List of packages installed usingdpkgFile
/linux/packages-rpm.data: List of packages installed usingrpm
Depth¶
Surface
Security impact¶
Low — No known security impact.
PostgreSQL disk layout (linux_postgresql_disk_layout )¶
Description¶
Lists all files in the Postgres data directory using find for links
and ls for files
Report output¶
File
/linux/pg_ls.data: List of files inside the data directoryFile
/linux/pg_links.data: List of links inside the data directory
Depth¶
Surface
Security impact¶
Low — No known security impact.
SELinux (linux_sestatus )¶
Description¶
SELinux status from sestatus
Report output¶
File /linux/sestatus.data : Output from ‘setstatus’
Depth¶
Surface
Security impact¶
Low — No known security impact.
System identification (linux_system_identity )¶
Description¶
Collects hostname, network interfaces, system info (uname), system identifier, and release info
Report output¶
File
/linux/id/system_release.data: OS information from/etc/system-releaseFile
/linux/id/os_release.data: OS information from/etc/os-releaseFile
/linux/id/machine_id.data: Machine ID contained in/etc/machine-idFile
/linux/id/uname.data: Information about the running kernelFile
/linux/id/hostname.data: Fully qualified domain nameFile
/linux/id/interfaces.data: Network addresses of the host
Depth¶
Surface
Security impact¶
Low — No known security impact.
dmesg and /proc information (linux_system_info )¶
Description¶
System info from the contents of the /proc filesystem and through
the output of dmesg command.
Report output¶
File
/linux/lsmod.data: Lsmod outputFile
/linux/dmesg_with_timestamp.data: Dmesg output (human readable timestamps)File
/linux/dmesg.data: Dmesg outputFile
/linux/proc/sys_net_ipv4.data: Network info from/procFile
/linux/proc/sys_vm.data: vm info from/procFile
/linux/proc/sys_kernel.data: Kernel info from/procFile
/linux/vmstat.data: VM statistics from/procFile
/linux/proc/mounts.data: Mount points from/procFile
/linux/proc/uptime.data: Uptime info from/procFile
/linux/proc/loadavg.data: Load avg from/procFile
/linux/proc/meminfo.data: Memory info from/proc
Depth¶
Surface
Security impact¶
Low — No known security impact.
System status - iostat (linux_system_status_iostat )¶
Description¶
System status from the iostat command
Report output¶
File /linux/iostat.data : Info on I/O statistics
Depth¶
Surface
Security impact¶
Low — No known security impact.
System status - nfsiostat (linux_system_status_nfsiostat )¶
Description¶
System status from the nfsiostat command
Report output¶
File /linux/nfsiostat.data : nfs I/O statistics
Depth¶
Surface
Security impact¶
Low — No known security impact.
System status - ps (linux_system_status_ps )¶
Description¶
System status from the ps command
Report output¶
File /linux/ps.data : Active processes info
Depth¶
Surface
Security impact¶
Low — Some processes might contain sensitive data in their names.
System status - sar (linux_system_status_sar )¶
Description¶
System status from the sar command
Report output¶
File
/linux/sar.data: ActualsarinfoFile
/linux/sar-yesterday.data:sarinfo from yesterday
Depth¶
Surface
Security impact¶
Low — No known security impact.
System status - top (linux_system_status_top )¶
Description¶
System status from the top command
Report output¶
File /linux/top.data : Process information
Depth¶
Surface
Security impact¶
Low — Some processes might contain sensitive data in their names.
System status - vmstat (linux_system_status_vmstat )¶
Description¶
System status from the vmstat command
Report output¶
File /linux/vmstat.data : Info on processes, memory, paging, block
IO, traps, disks and cpu activity
Depth¶
Surface
Security impact¶
Low — No known security impact.
systemctl units (linux_systemctl_units )¶
Description¶
Systemctl list-units on a systemd server
Report output¶
File /linux/systemctl-list-units.data : Output of ‘systemctl
list-units’
Depth¶
Surface
Security impact¶
Low — No known security impact.
tuned (linux_tuned )¶
Description¶
Tuned status and profiles
Report output¶
Directory
/linux/tuned/tune-profiles: Files from/etc/tune-profilesDirectory
/linux/tuned/tuned: Files from/etc/tunedFile
/linux/tuned/tuned.conf: The file/etc/tuned.confFile
/linux/tuned/tuned-list.data: Output fromtuned_adm listFile
/linux/tuned/tuned-active.data: Output fromtuned_adm active
Depth¶
Surface
Security impact¶
Low — No known security impact.
PEM configuration (pem_configuration )¶
Description¶
PEM configuration files from PEM agent, PEM server, and PEM web server
Report output¶
File
/tools/pem/config/edb-ssl-pem.conf: PEM web server SSL configuration fileFile
/tools/pem/config/edb-pem.conf: PEM web server configuration fileFile
/tools/pem/config/install-config: PEM server configuration file (installation config file)File
/tools/pem/config/config_setup.py: PEM server setup configuration fileFile
/tools/pem/config/pem.wsgi: PEM server WSGI definition fileFile
/tools/pem/config/agent.cfg: PEM agent configuration file
Depth¶
Surface
Security impact¶
Low — No known security impact.
PEM systemctl (pem_systemctl )¶
Description¶
When PEM is detected, collects PEM agent and PEM web server status and content
Report output¶
File
/tools/pem/systemd/<service_name>_cat.data: Output of ’systemctl catFile
/tools/pem/systemd/<service_name>_status.data: Output of ’systemctl status
Depth¶
Surface
Security impact¶
Low — No known security impact.
PgBouncer configuration (pgbouncer_configuration )¶
Description¶
PgBouncer configuration files
Report output¶
File /tools/pgbouncer/<num>/config/<basename> : PgBouncer
configuration file from instance <num>
Depth¶
Surface
Security impact¶
Low — No known security impact.
PgBouncer systemctl (pgbouncer_systemctl )¶
Description¶
When PgBouncer services are detected, collects status and cat of the corresponding services. Checks for any service that contains any of the PgBouncer configuration files.
Report output¶
File
/tools/pgbouncer/<num>/systemd/<service_name>_cat.data: Output of ’systemctl cat from instance<num>File
/tools/pgbouncer/<num>/systemd/<service_name>_status.data: Output of ’systemctl status from instance<num>
Depth¶
Surface
Security impact¶
Low — No known security impact.
postgres/enterprisedb crontab (postgres_enterprisedb_crontab )¶
Description¶
Output from crontab -l , if running as postgres or enterprisedb
Report output¶
File
/linux/enterprisedb_crontab.data: Output from enterprisedb crontab -l, if enterprisedb userFile
/linux/postgres_crontab.data: Output from postgres crontab -l, if postgres user
Depth¶
Surface
Security impact¶
Low — Might have entries in crontab/cron with sensitive data.
repmgr CLI (repmgr_cli )¶
Description¶
Collects output of repmgr cluster crosscheck and
repmgr daemon status using the repmgr.conf file that’s found in
the server
Report output¶
File
/tools/repmgr/cli/daemon_status.out: Output ofrepmgr daemon status -f <conf_file_path>commandFile
/tools/repmgr/cli/cluster_crosscheck.out: Output ofrepmgr cluster crosscheck -f <conf_file_path>command
Depth¶
Surface
Security impact¶
Low — No known security impact.
repmgr configuration (repmgr_configuration )¶
Description¶
Collects repmgr configuration file that’s found in the server
Report output¶
File /tools/repmgr/config/repmgr.conf : repmgr configuration file
Depth¶
Surface
Security impact¶
Low — No known security impact.
repmgr systemctl (repmgr_systemctl )¶
Description¶
When repmgr services are detected, collects status and cat of the
corresponding services. Checks for any service whose name starts with
repmgr .
Report output¶
File
/tools/repmgr/systemd/<service_name>_cat.data: Output of ’systemctl catFile
/tools/repmgr/systemd/<service_name>_status.data: Output of ’systemctl status
Depth¶
Surface
Security impact¶
Low — No known security impact.
xDB CLI (xdb_cli )¶
Description¶
xDB output from several CLI commands, from the running xDB publication and subscription server
Report output¶
Directory
/tools/xdb/cli: xDB CLI print commands
Depth¶
Surface
Security impact¶
Low — No known security impact.
xDB configuration (xdb_configuration )¶
Description¶
xDB configuration files
Report output¶
File
/tools/xdb/config/xdbReplicationServer.config: xDB startup configurationFile
/tools/xdb/config/edb-repl.conf: xDB replication configurationFile
/tools/xdb/config/xdb_subserver.conf: xDB subscription server configurationFile
/tools/xdb/config/xdb_pubserver.conf: xDB publication server configuration
Depth¶
Surface
Security impact¶
Low — No known security impact.
xDB systemctl (xdb_systemctl )¶
Description¶
When xDB services are detected, collects status and cat of edb- xdbpubserver and edb-xdbsubserver
Report output¶
File
/tools/xdb/systemd/<service_name>_cat.data: Output ofsystemctl cat <service_name>File
/tools/xdb/systemd/<service_name>_status.data: Output ofsystemctl status <service_name>
Depth¶
Surface
Security impact¶
Low — No known security impact.
Microsoft Windows operating system ### PEM configuration - Windows (pem_configuration_windows )¶
Description¶
PEM configuration files from PEM agent, PEM server, and PEM web server in a Windows environment
Report output¶
File
/tools/pem/config/edb-ssl-pem.conf: PEM web server SSL configuration fileFile
/tools/pem/config/edb-pem.conf: PEM web server configuration fileFile
/tools/pem/config/pem.wsgi: PEM server WSGI definition fileFile
/tools/pem/config/agent.cfg: PEM agent configuration file
Depth¶
Surface
Security impact¶
Low — No known security impact.
PEM sc (pem_sc )¶
Description¶
When PEM is detected, collects PEM agent and PEM web server status and content
Report output¶
File /tools/pem/sc/<service_name>_query.data : Output of
sc query <service_name>
Depth¶
Surface
Security impact¶
Low — No known security impact.
Disk information (win_disk_information )¶
Description¶
Disk and controller information from the system registry
Report output¶
File
/windows/enum_ide.reg: Local machine ide device settingsFile
/windows/enum_scsi.reg: Local machine scsi device settings
Depth¶
Surface
Security impact¶
Low — No known security impact.
Hosts file (win_hosts )¶
Description¶
Host files and network-related information
Report output¶
File
/windows/services.data: WindowsservicesfileFile
/windows/protocol.data: WindowsprotocolfileFile
/windows/networks.data: WindowsnetworksfileFile
/windows/hosts.sam: Windowshosts.samfileFile
/windows/hosts.data: Windowshostsfile
Depth¶
Surface
Security impact¶
Low — No known security impact.
MsInfo (win_msinfo )¶
Description¶
MsInfo32 report in NFO and TXT format
Report output¶
File
/windows/msinfo_report.txt: Information from theMsInfo32in textual formatFile
/windows/msinfo_report.nfo: Information from theMsInfo32in NFO
Depth¶
Surface
Security impact¶
Low — No known security impact.
ODBC/64 (win_odbc32_info )¶
Description¶
ODBC configuration from the 64-bit registry section
Report output¶
File
/windows/user_odbc_wow64.reg: User DSN listFile
/windows/localmachine_odbcinst_wow64.reg: List of installed ODBC driversFile
/windows/localmachine_odbc_wow64.reg: System DSN list
Depth¶
Surface
Security impact¶
Medium — ODBC connection information can expose the presence of other databases or connection information to Postgres that can be used to attack the system.
ODBC/32 (win_odbc64_info )¶
Description¶
ODBC configuration from the 32-bit registry section
Report output¶
File
/windows/user_odbc.reg: User DSN listFile
/windows/localmachine_odbcinst.reg: List of installed ODBC driversFile
/windows/localmachine_odbc.reg: System DSN list
Depth¶
Surface
Security impact¶
Medium — ODBC connection information can expose the presence of other databases or connection information to Postgres that can be used to attack the system.
systeminfo (win_systeminfo )¶
Description¶
Output of the systeminfo command
Report output¶
File /windows/systeminfo_report.txt : Information from the
systeminfo command
Depth¶
Surface
Security impact¶
Low — No known security impact.
Disk volumes (win_volumes )¶
Description¶
Volume list from WMI
Report output¶
File
/windows/association_structure: Association between drive letters and physical drivesFile
/windows/volume_disk: Volume list from the WMI subsystemFile
/windows/logical_disk_list: Logical disk list from the WMI subsystemFile
/windows/disk_partition_list: Disk partition list from the WMI subsystemFile
/windows/disk_drive_list: Disk list from the WMI subsystem
Depth¶
Surface
Security impact¶
Low — No known security impact.
xDB CLI - Windows (xdb_cli_windows )¶
Description¶
xDB output from several CLI commands, from the running xDB publication and subscription server
Report output¶
Directory
/tools/xdb/cli: xDB CLI print commands
Depth¶
Surface
Security impact¶
Low — No known security impact.
xDB configuration - Windows (xdb_configuration_windows )¶
Description¶
xDB configuration files
Report output¶
File
/tools/xdb/config/xdbReplicationServer.config: xDB startup configuration`File
/tools/xdb/config/edb-repl.conf: xDB replication configuration`File
/tools/xdb/config/xdb_subserver.conf: xDB subscription server configurationFile
/tools/xdb/config/xdb_pubserver.conf: xDB publication server configuration
Depth¶
Surface
Security impact¶
Low — No known security impact.
xDB sc (xdb_sc )¶
Description¶
When xDB is detected, collects xDB Publication and Subscription server status
Report output¶
File /tools/xdb/sc/<service_name>_query.data : Output of ’sc query
Depth¶
Surface
Security impact¶
Low — No known security impact.
PostgreSQL/PGD3 nstance ### Current archiver stats (postgresql_archiver )¶
Description¶
Statistics about the archiver process’s activity from pg_stat_archiver
Report output¶
File postgresql/archiver.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Available extensions (postgresql_available_extensions )¶
Description¶
List of extensions available on the server
Report output¶
File postgresql/available_extensions.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Current bg_writer stats (postgresql_bgwriter )¶
Description¶
Statistics about the background writer process’s activity from pg_stat_bgwriter
Report output¶
File postgresql/bgwriter.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Directory with binaries (postgresql_bin_dir )¶
Description¶
PostgreSQL binary directory
Report output¶
File /postgresql/postgresql_bin_path.data : Path to the Postgres bin
directory
Depth¶
Surface
Security impact¶
Low — No known security impact.
Current configuration (postgresql_configuration )¶
Description¶
Postgres current configuration
Report output¶
File postgresql/configuration.out
Depth¶
Surface
Security impact¶
Medium — postgresql.conf might contain bad security policies
Configuration files (postgresql_configuration_files )¶
Description¶
Postgres configuration files and the data directory path. Passwords contained in well-known connection strings are redacted for information security reasons.
Report output¶
File
/postgresql/pg_ident.conf: Postgres ident configuration fileFile
/postgresql/pg_hba.conf: Postgres host-based authentication fileFile
/postgresql/postgresql.auto.conf: Postgres auto configuration fileFile
/postgresql/recovery.done: Postgres recovery.done fileFile
/postgresql/recovery.conf: Postgres recovery.conf fileFile
/postgresql/postgresql.conf: Postgres configuration file
Depth¶
Surface
Security impact¶
Medium — pg_hba.conf and pg_ident.conf might expose potential
security holes, such as trusted connections.
Databases (postgresql_databases )¶
Description¶
List of databases in the Postgres node
Report output¶
File postgresql/databases.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
postgresql_db_bdr_tables_and_views (postgresql_db_bdr_tables_and_views )¶
Description¶
Collects all the tables and views of the BDR extension, except for:
bdr.apply_logbdr.conflict_historybdr.consensus_kv_databdr.internal_node_pre_commitbdr.replication_statusbdr.state_journalbdr.stat_activity
Report output¶
File /postgresql/dbs/<dbname>/bdr/* : Content of all tables under
the BDR schema
Depth¶
Shallow
Security impact¶
Low — No known security impact.
postgresql_db_pglogical_tables_and_views (postgresql_db_pglogical_tables_and_views )¶
Description¶
Collects all the tables and views of the pglogical extension
Report output¶
File /postgresql/dbs/<dbname>/pglogical/* : Content of all tables
under the pglogical schema
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database/Role Setting (postgresql_db_role_setting )¶
Description¶
List of database/role settings in the Postgres node
Report output¶
File postgresql/db_role_setting.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Node and snapshot data (postgresql_node )¶
Description¶
Information about the running Postgres node
Report output¶
File postgresql/node.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
pg_config (postgresql_pg_config )¶
Description¶
Postgres pg_config command output
Report output¶
File /postgresql/pg_config.data : pg_config command output
Depth¶
Surface
Security impact¶
Low — No known security impact.
pg_controldata (postgresql_pg_controldata )¶
Description¶
Postgres pg_controldata information
Report output¶
File /postgresql/pg_controldata.data : pg_controldata command
output
Depth¶
Surface
Security impact¶
Low — No known security impact.
Version (postgresql_pg_version )¶
Description¶
Postgres client and server version
Report output¶
File
/postgresql/postgresql_server_version.data: Postgres server versionFile
/postgresql/postgresql_client_version.data: Postgres client version
Depth¶
Surface
Security impact¶
Low — No known security impact.
Current pg_prepared_xacts contents (postgresql_prepared_xacts )¶
Description¶
Status of prepared xacts from pg_prepared_xacts
Report output¶
File postgresql/prepared_xacts.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Current pg_replication_origin_status contents (postgresql_replication_origin )¶
Description¶
Status of replication origins from pg_replication_origin_status
Report output¶
File postgresql/replication_origins.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Current pg_replication_slots contents (postgresql_replication_slots )¶
Description¶
Replication slots from pg_replication_slots
Report output¶
File postgresql/replication_slots.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Roles (postgresql_roles )¶
Description¶
Database roles from pg_roles
Report output¶
File postgresql/roles.out
Depth¶
Shallow
Security impact¶
Medium — pg_roles might contain bad security policies
Current activity stats (postgresql_running_activity )¶
Description¶
Information related to the current activity on running processes from
pg_stat_activity
Report output¶
File postgresql/running_activity.out
Depth¶
Shallow
Security impact¶
Low — queries in pg_stat_activity could contain user names and
application names.
Active locks (postgresql_running_locks )¶
Description¶
List of active locks
Report output¶
File postgresql/running_locks.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Current pg_shmem_allocations contents (postgresql_shmem_allocations )¶
Description¶
Status of shared memory allocations from pg_shmem_allocations
Report output¶
File postgresql/shmem_allocations.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Current pg_stat_replication contents (postgresql_stat_replication )¶
Description¶
Replication connections from pg_stat_replication
Report output¶
File postgresql/replication.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Server subscription statistics (postgresql_subscription_statistics )¶
Description¶
Statistics of subscriptions
Report output¶
File postgresql/subscription_statistics.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Server subscriptions (postgresql_subscriptions )¶
Description¶
List of subscriptions
Report output¶
File postgresql/subscriptions.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Tablespaces (postgresql_tablespaces )¶
Description¶
Tablespaces information and location
Report output¶
File postgresql/tablespaces.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Details for every Postgres/BDR3 database ### PGD1 replication slots (postgresql_db_bdr1_replication_slots )¶
Description¶
List of replication slots with 9.6 format for PGD1
Report output¶
File bdr1_replication_slots.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
PGD2 replication slots (postgresql_db_bdr2_replication_slots )¶
Description¶
List of replication slots with 9.6 format for PGD2
Report output¶
File bdr2_replication_slots.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
PGD conflict_history_summary aggregation (postgresql_db_bdr3_conflict_history_summary_agg )¶
Description¶
Collects aggregate count for all types of conflicts
Report output¶
File bdr_conflict_history_summary_agg.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
PGD current activity stats (postgresql_db_bdr3_stat_activity )¶
Description¶
Information related to the current activity on running processes from
bdr.stat_activity
Report output¶
File bdr_stat_activity.out
Depth¶
Shallow
Security impact¶
Low — queries in bdr.stat_activity could contain user names and
application names.
PGD sequences (postgresql_db_bdr_sequences )¶
Description¶
List of the PGD sequences
Report output¶
File bdr_sequences.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
PGD version (postgresql_db_bdr_version )¶
Description¶
Currently used version of PGD
Report output¶
File bdr_version.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Database extensions (postgresql_db_extensions )¶
Description¶
List of extensions in the database
Report output¶
File extensions.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database indexes (postgresql_db_indexes )¶
Description¶
List of indexes in the database
Report output¶
File indexes.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database procedural languages (postgresql_db_languages )¶
Description¶
Procedural languages in the database
Report output¶
File language.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
PGD monitor_group_raft (postgresql_db_monitor_group_raft )¶
Description¶
Check the raft status in the bdr cluster
Report output¶
File bdr_monitor_group_raft.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
PGD monitor_group_versions (postgresql_db_monitor_group_versions )¶
Description¶
Check the version of all PGD nodes
Report output¶
File bdr_monitor_group_versions.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
PGD monitor_local_replslots (postgresql_db_monitor_local_replslots )¶
Description¶
Checks all the replication slot status
Report output¶
File bdr_monitor_local_replslots.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Database operators (postgresql_db_operators )¶
Description¶
Operators in the database
Report output¶
File operator.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database partitioned tables (postgresql_db_partitioned_tables )¶
Description¶
Information about partitioned tables using declarative partitioning
Report output¶
File partitioned_table.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.agent table tuples (postgresql_db_pem_agent )¶
Description¶
Data from metatable pem.agent
Report output¶
File pem_agent.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.agent_config table tuples (postgresql_db_pem_agent_config )¶
Description¶
Data from metatable pem.agent_config
Report output¶
File pem_agent_config.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.agent_heartbeat table tuples (postgresql_db_pem_agent_heartbeat )¶
Description¶
Data from metatable pem.agent_heartbeat
Report output¶
File pem_agent_heartbeat.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.agent_server_binding table tuples (postgresql_db_pem_agent_server_binding )¶
Description¶
Data from metatable pem.agent_server_binding
Report output¶
File pem_agent_server_binding.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.config table tuples (postgresql_db_pem_config )¶
Description¶
Data from metatable pem.config
Report output¶
File pem_config.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.email_group table tuples (postgresql_db_pem_email_group )¶
Description¶
Data from metatable pem.email_group
Report output¶
File pem_email_group.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.email_group_option table tuples (postgresql_db_pem_email_group_option )¶
Description¶
Data from metatable pem.email_group_option
Report output¶
File pem_email_group_option.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.probe table tuples (postgresql_db_pem_probe )¶
Description¶
Data from metatable pem.probe
Report output¶
File pem_probe.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.probe_schedule table tuples (postgresql_db_pem_probe_schedule )¶
Description¶
Data from metatable pem.probe_schedule
Report output¶
File pem_probe_schedule.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.schema_version() output (postgresql_db_pem_schema_version )¶
Description¶
Output from function pem.schema_version()
Report output¶
File pem_schema_version.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.server table tuples (postgresql_db_pem_server )¶
Description¶
Data from metatable pem.server
Report output¶
File pem_server.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.server_heartbeat table tuples (postgresql_db_pem_server_heartbeat )¶
Description¶
Data from metatable pem.server_heartbeat
Report output¶
File pem_server_heartbeat.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.smtp_spool table tuples (postgresql_db_pem_smtp_spool )¶
Description¶
Data from metatable pem.smtp_spool
Report output¶
File pem_smtp_spool.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database PEM pem.snmp_spool table tuples (postgresql_db_pem_snmp_spool )¶
Description¶
Data from metatable pem.snmp_spool
Report output¶
File pem_snmp_spool.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Pglogical subscription status (postgresql_db_pglogical_subscription_status )¶
Description¶
List of tables replicated by pglogical
Report output¶
File pglogical_subscription_status.out
Depth¶
Surface
Security impact¶
Low — No known security impact.
Database functions (postgresql_db_procs )¶
Description¶
Functions in the database
Report output¶
File proc.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database publication tables (postgresql_db_publication_tables )¶
Description¶
List of tables of publications of the database
Report output¶
File publication_tables.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database publications (postgresql_db_publications )¶
Description¶
List of publications of the database
Report output¶
File publications.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database repmgr repmgr.events table tuples (postgresql_db_repmgr_events )¶
Description¶
Data from metatable repmgr.events
Report output¶
File repmgr/events.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database repmgr repmgr.monitoring_history table tuples (postgresql_db_repmgr_monitoring_history )¶
Description¶
Data from metatable repmgr.monitoring_history
Report output¶
File repmgr/monitoring_history.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database repmgr repmgr.nodes table tuples (postgresql_db_repmgr_nodes )¶
Description¶
Data from metatable repmgr.nodes
Report output¶
File repmgr/nodes.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database repmgr repmgr.replication_status table tuples (postgresql_db_repmgr_replication_status )¶
Description¶
Data from metatable repmgr.replication_status
Report output¶
File repmgr/replication_status.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database repmgr repmgr.show_nodes table tuples (postgresql_db_repmgr_show_nodes )¶
Description¶
Data from metatable repmgr.show_nodes
Report output¶
File repmgr/show_nodes.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database schema (postgresql_db_schemas )¶
Description¶
List of schemas in the database
Report output¶
File schemas.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database statistics (postgresql_db_statistics )¶
Description¶
Statistics of the database
Report output¶
File statistics.out
Depth¶
Deep
Security impact¶
Low — No known security impact.
Database subscription tables (postgresql_db_subscription_tables )¶
Description¶
List of tables of subscriptions of the database
Report output¶
File subscription_tables.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database tables (postgresql_db_tables )¶
Description¶
List of tables in the database
Report output¶
File tables.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database types (postgresql_db_types )¶
Description¶
Types in the database
Report output¶
File type.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.xdb_mmr_pub_group table tuples (postgresql_db_xdb_mmr_pub_group )¶
Description¶
Data from metatable _edb_replicator_pub.xdb_mmr_pub_group
Report output¶
File xdb_mmr_pub_group.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.xdb_pub_database table tuples (postgresql_db_xdb_pub_database )¶
Description¶
Data from metatable _edb_replicator_pub.xdb_pub_database
Report output¶
File xdb_pub_database.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.xdb_pub_replog table tuples (postgresql_db_xdb_pub_replog )¶
Description¶
Last 50 rows from metatable _edb_replicator_pub.xdb_pub_replog
Report output¶
File xdb_pub_replog.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.xdb_publication_subscriptionstable tuples (postgresql_db_xdb_publication_subscriptions )¶
Description¶
Data from metatable
_edb_replicator_pub.xdb_publication_subscriptions
Report output¶
File xdb_publication_subscriptions.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.xdb_publications table tuples (postgresql_db_xdb_publications )¶
Description¶
Data from metatable _edb_replicator_pub.xdb_publications
Report output¶
File xdb_publications.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.rrep_mmr_pub_group table tuples (postgresql_db_xdb_rrep_mmr_pub_group )¶
Description¶
Data from metatable _edb_replicator_pub.rrep_mmr_pub_group
Report output¶
File xdb_rrep_mmr_pub_group.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.rrep_mmr_txset table tuples (postgresql_db_xdb_rrep_mmr_txset )¶
Description¶
Last 10 rows from metatable _edb_replicator_pub.rrep_mmr_txset
Report output¶
File xdb_rrep_mmr_txset.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.rrep_properties table tuples (postgresql_db_xdb_rrep_properties )¶
Description¶
Data from from metatable _edb_replicator_pub.rrep_properties
Report output¶
File xdb_rrep_properties.out
Depth:** shallow¶
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.rrep_publication_tablestable tuples (postgresql_db_xdb_rrep_publication_tables )¶
Description¶
Data from metatable _edb_replicator_pub.rrep_publication_tables
Report output¶
File xdb_rrep_publication_tables.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Database xDB _edb_replicator_pub.rrep_txset table tuples (postgresql_db_xdb_rrep_txset )¶
Description¶
Data from metatable _edb_replicator_pub.rrep_txset
Report output¶
File xdb_pub_rrep_txset.out
Depth¶
Shallow
Security impact¶
Low — No known security impact.
Barman (Backup and Recovery Manager) ### Barman check (barman_check )¶
Description¶
Collects the status of the Barman check framework for all configured
servers
Report output¶
File /barman/barman_check.data : Output of barman check
Depth¶
Surface
Security impact¶
Low — No known security impact.
Barman diagnose (barman_diagnose )¶
Description¶
Collects the barman diagnosis information
Report output¶
File /barman/diagnose.data : Output from ‘barman diagnose’
Depth¶
Surface
Security impact¶
Low — No known security impact.
Barman executable location (barman_executable )¶
Description¶
Collects the barman executable location
Report output¶
File /barman/barman_location.data : The path of the main barman
executable
Depth¶
Surface
Security impact¶
Low — No known security impact.
Barman module location (barman_modules_path )¶
Description¶
Collects the location of the barman Python modules
Report output¶
File /barman/barman_python_verbose.data : The list of Barman python
modules
Depth¶
Surface
Security impact¶
Low — No known security impact.