Detailed breakdown of gathered data v4

Suggest edits

GNU/Linux operating system

barman crontab/cron (`barman_crontab_cron`)

Description

Output from crontab -l, if running as barman. Content of /etc/cron.d/barman, if it exists.

Report output

File /linux/barman_cron.data: Content of /etc/cron.d/barman, if it exists
File /linux/barman_crontab.data: Output from barman crontab -l, if barman user

Depth

Surface

Security impact

Low — Might have entries in crontab/cron with sensitive data

debug_sources (`debug_sources`)

Description

Counts files under /usr/src/debug to detect the application source code present in the system and ease live debugging

Report output

File /linux/debug_sources.data: Sources for GNU debugger

Depth

Surface

Security impact

Low — No known security impact

EFM CLI (`efm_cli`)

Description

Gets output of efm cluster-status command

Report output

File /tools/efm/cli/cluster_status.out: Output of efm cluster-status <cluster_name> command

Depth

Surface

Security impact

Low — No known security impact.

EFM configuration (`efm_configuration`)

Description

EFM properties and nodes configuration files

Report output

File /tools/efm/config/efm.nodes: EFM nodes file
File /tools/efm/config/efm.properties: EFM properties file

Depth

Surface

Security impact

Low — No known security impact.

EFM systemctl (`efm_systemctl`)

Description

When EFM services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with edb-efm-.

Report output

File /tools/efm/systemd/<service_name>_cat.data: Output of 'systemctl cat <service_name>
File /tools/efm/systemd/<service_name>_status.data: Output of 'systemctl status <service_name>

Depth

Surface

Security impact

Low — No known security impact.

etcd CLI (`etcd_cli`)

Description

Gathers the output of some etcdctl commands, if etcdctl is available in the server. The commands are endpoint status and endpoint health.

Report output

File /tools/etcd/cli/endpoint_status.out: Output of etcdctl endpoint status command
File /tools/etcd/cli/endpoint_health.out: Output of etcdctl endpoint health command

Depth

Surface

Security impact

Low — No known security impact.

etcd configuration (`etcd_configuration`)

Description

Collects etcd configuration file that's found in the server

Report output

File /tools/etcd/config/<basename>: etcd configuration file

Depth

Surface

Security impact

Low — No known security impact.

etcd systemctl (`etcd_systemctl`)

Description

When etcd services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with etcd.

Report output

File /tools/etcd/systemd/<service_name>_cat.data: Output of 'systemctl cat <service_name>
File /tools/etcd/systemd/<service_name>_status.data: Output of 'systemctl status <service_name>

Depth

Surface

Security impact

Low — No known security impact.

HARP CLI (`harp_cli`)

Description

Gathers output of a few harpctl command outputs using the config.yml file that's found in the server. The commands are: cluster, proxies, locations, nodes, and version.

Report output

File /tools/harp/cli/version.out: Output of harp -f <conf_file_path> version command
File /tools/harp/cli/proxies.out: Output of harp -f <conf_file_path> get proxies -o yaml command
File /tools/harp/cli/nodes.out: Output of harp -f <conf_file_path> get nodes -o yaml command
File /tools/harp/cli/locations.out: Output of harp -f <conf_file_path> get locations -o yaml command
File /tools/harp/cli/cluster.out: Output of harp -f <conf_file_path> get cluster -o yaml command

Depth

Surface

Security impact

Low — No known security impact.

HARP configuration (`harp_configuration`)

Description

Collects HARP configuration file that's found in the server

Report output

File /tools/harp/config/harp.cluster.init.yml: HARP bootstrap configuration file
File /tools/harp/config/<basename>: HARP configuration file

Depth

Surface

Security impact

Low — No known security impact.

HARP systemctl (`harp_systemctl`)

Description

When HARP services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with harp.

Report output

File /tools/harp/systemd/<service_name>_cat.data: Output of 'systemctl cat <service_name>
File /tools/harp/systemd/<service_name>_status.data: Output of 'systemctl status <service_name>

Depth

Surface

Security impact

Low — No known security impact.

Block devices layout (`linux_block_devices_layout`)

Description

Information on block devices layout from the lsblk command

Report output

File /linux/lsbk.data: lsbk command output

Depth

Surface

Security impact

Low — No known security impact.

Processor governor (`linux_cpu_governor`)

Description

Processor scaling governor from the files in /sys/devices/system/cpu

Report output

File /linux/sys/energy_perf_bias.data: Intel Performance and Energy Bias attributes
File /linux/sys/intel_pstate.data: Intel pstate configuration
File /linux/sys/cpu_scaling_driver.data: available CPU scaling driver
File /linux/sys/cpu_scaling_available_governors.data: available CPU scaling governors
File /linux/sys/cpu_scaling_governor.data: active CPU scaling governor

Depth

Surface

Security impact

Low — No known security impact.

Mounted file systems and available space (`linux_devices_info`)

Description

Lists mounted filesystems through the mount command and free space using df

Report output

File /linux/diskspace.data: amount of available disk space
File /linux/mount.data: Output of the mount command

Depth

Surface

Security impact

Low — No known security impact.

File systems configuration (`linux_disk_configuration`)

Description

Disk configuration obtained through the /etc/fstab file

Report output

File /linux/fstab.data: contents of /etc/fstab

Depth

Surface

Security impact

Low — No known security impact.

OS distribution, kernel and device data (`linux_distro_collector`)

Description

Information about the Linux distribution currently in use, as returned by the lsb_release command

Report output

File /linux/release.data: The Linux distribution currently in use
File /linux/release_source.data: The name of the collected file or the executed command

Depth

Surface

Security impact

Low — No known security impact.

Hardware (`linux_hardware_info`)

Description

Hardware info through lspci

Report output

File /linux/lspci.data: Hardware info from lspci

Depth

Surface

Security impact

Low — No known security impact.

Hypervisor (`linux_hypervisor_collector`)

Description

Information about the type of virtualization used, as returned by the systemd-detect-virt command

Report output

File /linux/hypervisor.data: The name of the collected file or the executed command

Depth

Surface

Security impact

Low — No known security impact.

Kernel (`linux_kernel_info`)

Description

Kernel info, transparent huge pages status, and disk scheduler configuration obtained by combining the output of the commands uname and ipcs with the contents of the /proc and /sys filesystems

Report output

File /linux/read_ahead.data: Info on the read ahead
File /linux/schedulers.data: Scheduler info from /sys dir
File /linux/sys/kernel_mm_transparent_hugepage.data: Transparent huge pages info
File /linux/ipcs.data: ipcs command output
File /linux/uname.data: uname command output

Depth

Surface

Security impact

Low — No known security impact.

Kernel limits (`linux_kernel_limits`)

Description

Configuration file for the pam_limits module

Report output

File /linux/limits.data: content of the limits.conf file

Depth

Surface

Security impact

Low — No known security impact.

Processor usage statistics (`linux_mpstat`)

Description

Processor statistics from the mpstat command.

Report output

File /linux/mpstat.data: Output from 'mpstat -P ALL 1 10'

Depth

Surface

Security impact

Low — No known security impact.

Network interfaces (`linux_network_interfaces`)

Description

Network interface information from the ip and ifconfig commands

Report output

File /linux/ifconfig.data: Output from 'ifconfig'
File /linux/ip_address_list.data: Output from 'ip address list'

Depth

Surface

Security impact

Low — No known security impact.

Installed packages via rpm or dpkg (`linux_packages_info`)

Description

Information about the system packages installed using rpm or dpkg

Report output

File /linux/packages-dpkg.data: List of packages installed using dpkg
File /linux/packages-rpm.data: List of packages installed using rpm

Depth

Surface

Security impact

Low — No known security impact.

PostgreSQL disk layout (`linux_postgresql_disk_layout`)

Description

Lists all files in the Postgres data directory using find for links and ls for files

Report output

File /linux/pg_ls.data: List of files inside the data directory
File /linux/pg_links.data: List of links inside the data directory

Depth

Surface

Security impact

Low — No known security impact.

SELinux (`linux_sestatus`)

Description

SELinux status from sestatus

Report output

File /linux/sestatus.data: Output from 'setstatus'

Depth

Surface

Security impact

Low — No known security impact.

System identification (`linux_system_identity`)

Description

Collects hostname, network interfaces, system info (uname), system identifier, and release info

Report output

File /linux/id/system_release.data: OS information from /etc/system-release
File /linux/id/os_release.data: OS information from /etc/os-release
File /linux/id/machine_id.data: Machine ID contained in /etc/machine-id
File /linux/id/uname.data: Information about the running kernel
File /linux/id/hostname.data: Fully qualified domain name
File /linux/id/interfaces.data: Network addresses of the host

Depth

Surface

Security impact

Low — No known security impact.

dmesg and /proc information (`linux_system_info`)

Description

System info from the contents of the /proc filesystem and through the output of dmesg command.

Report output

File /linux/lsmod.data: Lsmod output
File /linux/dmesg_with_timestamp.data: Dmesg output (human readable timestamps)
File /linux/dmesg.data: Dmesg output
File /linux/proc/sys_net_ipv4.data: Network info from /proc
File /linux/proc/sys_vm.data: vm info from /proc
File /linux/proc/sys_kernel.data: Kernel info from /proc
File /linux/vmstat.data: VM statistics from /proc
File /linux/proc/mounts.data: Mount points from /proc
File /linux/proc/uptime.data: Uptime info from /proc
File /linux/proc/loadavg.data: Load avg from /proc
File /linux/proc/meminfo.data: Memory info from /proc

Depth

Surface

Security impact

Low — No known security impact.

System status - iostat (`linux_system_status_iostat`)

Description

System status from the iostat command

Report output

File /linux/iostat.data: Info on I/O statistics

Depth

Surface

Security impact

Low — No known security impact.

System status - nfsiostat (`linux_system_status_nfsiostat`)

Description

System status from the nfsiostat command

Report output

File /linux/nfsiostat.data: nfs I/O statistics

Depth

Surface

Security impact

Low — No known security impact.

System status - ps (`linux_system_status_ps`)

Description

System status from the ps command

Report output

File /linux/ps.data: Active processes info

Depth

Surface

Security impact

Low — Some processes might contain sensitive data in their names.

System status - sar (`linux_system_status_sar`)

Description

System status from the sar command

Report output

File /linux/sar.data: Actual sar info
File /linux/sar-yesterday.data: sar info from yesterday

Depth

Surface

Security impact

Low — No known security impact.

System status - top (`linux_system_status_top`)

Description

System status from the top command

Report output

File /linux/top.data: Process information

Depth

Surface

Security impact

Low — Some processes might contain sensitive data in their names.

System status - vmstat (`linux_system_status_vmstat`)

Description

System status from the vmstat command

Report output

File /linux/vmstat.data: Info on processes, memory, paging, block IO, traps, disks and cpu activity

Depth

Surface

Security impact

Low — No known security impact.

systemctl units (`linux_systemctl_units`)

Description

Systemctl list-units on a systemd server

Report output

File /linux/systemctl-list-units.data: Output of 'systemctl list-units'

Depth

Surface

Security impact

Low — No known security impact.

tuned (`linux_tuned`)

Description

Tuned status and profiles

Report output

Directory /linux/tuned/tune-profiles: Files from /etc/tune-profiles
Directory /linux/tuned/tuned: Files from /etc/tuned
File /linux/tuned/tuned.conf: The file /etc/tuned.conf
File /linux/tuned/tuned-list.data: Output from tuned_adm list
File /linux/tuned/tuned-active.data: Output from tuned_adm active

Depth

Surface

Security impact

Low — No known security impact.

PEM configuration (`pem_configuration`)

Description

PEM configuration files from PEM agent, PEM server, and PEM web server

Report output

File /tools/pem/config/edb-ssl-pem.conf: PEM web server SSL configuration file
File /tools/pem/config/edb-pem.conf: PEM web server configuration file
File /tools/pem/config/install-config: PEM server configuration file (installation config file)
File /tools/pem/config/config_setup.py: PEM server setup configuration file
File /tools/pem/config/pem.wsgi: PEM server WSGI definition file
File /tools/pem/config/agent.cfg: PEM agent configuration file

Depth

Surface

Security impact

Low — No known security impact.

PEM systemctl (`pem_systemctl`)

Description

When PEM is detected, collects PEM agent and PEM web server status and content

Report output

File /tools/pem/systemd/<service_name>_cat.data: Output of 'systemctl cat <service_name>
File /tools/pem/systemd/<service_name>_status.data: Output of 'systemctl status <service_name>

Depth

Surface

Security impact

Low — No known security impact.

PgBouncer configuration (`pgbouncer_configuration`)

Description

PgBouncer configuration files

Report output

File /tools/pgbouncer/<num>/config/<basename>: PgBouncer configuration file from instance <num>

Depth

Surface

Security impact

Low — No known security impact.

PgBouncer systemctl (`pgbouncer_systemctl`)

Description

When PgBouncer services are detected, collects status and cat of the corresponding services. Checks for any service that contains any of the PgBouncer configuration files.

Report output

File /tools/pgbouncer/<num>/systemd/<service_name>_cat.data: Output of 'systemctl cat <service_name> from instance <num>
File /tools/pgbouncer/<num>/systemd/<service_name>_status.data: Output of 'systemctl status <service_name> from instance <num>

Depth

Surface

Security impact

Low — No known security impact.

postgres/enterprisedb crontab (`postgres_enterprisedb_crontab`)

Description

Output from crontab -l, if running as postgres or enterprisedb

Report output

File /linux/enterprisedb_crontab.data: Output from enterprisedb crontab -l, if enterprisedb user
File /linux/postgres_crontab.data: Output from postgres crontab -l, if postgres user

Depth

Surface

Security impact

Low — Might have entries in crontab/cron with sensitive data.

repmgr CLI (`repmgr_cli`)

Description

Collects output of repmgr cluster crosscheck and repmgr daemon status using the repmgr.conf file that's found in the server

Report output

File /tools/repmgr/cli/daemon_status.out: Output of repmgr daemon status -f <conf_file_path> command
File /tools/repmgr/cli/cluster_crosscheck.out: Output of repmgr cluster crosscheck -f <conf_file_path> command

Depth

Surface

Security impact

Low — No known security impact.

repmgr configuration (`repmgr_configuration`)

Description

Collects repmgr configuration file that's found in the server

Report output

File /tools/repmgr/config/repmgr.conf: repmgr configuration file

Depth

Surface

Security impact

Low — No known security impact.

repmgr systemctl (`repmgr_systemctl`)

Description

When repmgr services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with repmgr.

Report output

File /tools/repmgr/systemd/<service_name>_cat.data: Output of 'systemctl cat <service_name>
File /tools/repmgr/systemd/<service_name>_status.data: Output of 'systemctl status <service_name>

Depth

Surface

Security impact

Low — No known security impact.

xDB CLI (`xdb_cli`)

Description

xDB output from several CLI commands, from the running xDB publication and subscription server

Report output

Directory /tools/xdb/cli: xDB CLI print commands

Depth

Surface

Security impact

Low — No known security impact.

xDB configuration (`xdb_configuration`)

Description

xDB configuration files

Report output

File /tools/xdb/config/xdbReplicationServer.config: xDB startup configuration
File /tools/xdb/config/edb-repl.conf: xDB replication configuration
File /tools/xdb/config/xdb_subserver.conf: xDB subscription server configuration
File /tools/xdb/config/xdb_pubserver.conf: xDB publication server configuration

Depth

Surface

Security impact

Low — No known security impact.

xDB systemctl (`xdb_systemctl`)

Description

When xDB services are detected, collects status and cat of edb- xdbpubserver and edb-xdbsubserver

Report output

File /tools/xdb/systemd/<service_name>_cat.data: Output of systemctl cat <service_name>
File /tools/xdb/systemd/<service_name>_status.data: Output of systemctl status <service_name>

Depth

Surface

Security impact

Low — No known security impact.

Microsoft Windows operating system

PEM configuration - Windows (`pem_configuration_windows`)

Description

PEM configuration files from PEM agent, PEM server, and PEM web server in a Windows environment

Report output

File /tools/pem/config/edb-ssl-pem.conf: PEM web server SSL configuration file
File /tools/pem/config/edb-pem.conf: PEM web server configuration file
File /tools/pem/config/pem.wsgi: PEM server WSGI definition file
File /tools/pem/config/agent.cfg: PEM agent configuration file

Depth

Surface

Security impact

Low — No known security impact.

PEM sc (`pem_sc`)

Description

When PEM is detected, collects PEM agent and PEM web server status and content

Report output

File /tools/pem/sc/<service_name>_query.data: Output of sc query <service_name>

Depth

Surface

Security impact

Low — No known security impact.

Disk information (`win_disk_information`)

Description

Disk and controller information from the system registry

Report output

File /windows/enum_ide.reg: Local machine ide device settings
File /windows/enum_scsi.reg: Local machine scsi device settings

Depth

Surface

Security impact

Low — No known security impact.

Hosts file (`win_hosts`)

Description

Host files and network-related information

Report output

File /windows/services.data: Windows services file
File /windows/protocol.data: Windows protocol file
File /windows/networks.data: Windows networks file
File /windows/hosts.sam: Windows hosts.sam file
File /windows/hosts.data: Windows hosts file

Depth

Surface

Security impact

Low — No known security impact.

MsInfo (`win_msinfo`)

Description

MsInfo32 report in NFO and TXT format

Report output

File /windows/msinfo_report.txt: Information from the MsInfo32 in textual format
File /windows/msinfo_report.nfo: Information from the MsInfo32 in NFO

Depth

Surface

Security impact

Low — No known security impact.

ODBC/64 (`win_odbc32_info`)

Description

ODBC configuration from the 64-bit registry section

Report output

File /windows/user_odbc_wow64.reg: User DSN list
File /windows/localmachine_odbcinst_wow64.reg: List of installed ODBC drivers
File /windows/localmachine_odbc_wow64.reg: System DSN list

Depth

Surface

Security impact

Medium — ODBC connection information can expose the presence of other databases or connection information to Postgres that can be used to attack the system.

ODBC/32 (`win_odbc64_info`)

Description

ODBC configuration from the 32-bit registry section

Report output

File /windows/user_odbc.reg: User DSN list
File /windows/localmachine_odbcinst.reg: List of installed ODBC drivers
File /windows/localmachine_odbc.reg: System DSN list

Depth

Surface

Security impact

Medium — ODBC connection information can expose the presence of other databases or connection information to Postgres that can be used to attack the system.

systeminfo (`win_systeminfo`)

Description

Output of the systeminfo command

Report output

File /windows/systeminfo_report.txt: Information from the systeminfo command

Depth

Surface

Security impact

Low — No known security impact.

Disk volumes (`win_volumes`)

Description

Volume list from WMI

Report output

File /windows/association_structure: Association between drive letters and physical drives
File /windows/volume_disk: Volume list from the WMI subsystem
File /windows/logical_disk_list: Logical disk list from the WMI subsystem
File /windows/disk_partition_list: Disk partition list from the WMI subsystem
File /windows/disk_drive_list: Disk list from the WMI subsystem

Depth

Surface

Security impact

Low — No known security impact.

xDB CLI - Windows (`xdb_cli_windows`)

Description

xDB output from several CLI commands, from the running xDB publication and subscription server

Report output

Directory /tools/xdb/cli: xDB CLI print commands

Depth

Surface

Security impact

Low — No known security impact.

xDB configuration - Windows (`xdb_configuration_windows`)

Description

xDB configuration files

Report output

File /tools/xdb/config/xdbReplicationServer.config: xDB startup configuration`
File /tools/xdb/config/edb-repl.conf: xDB replication configuration`
File /tools/xdb/config/xdb_subserver.conf: xDB subscription server configuration
File /tools/xdb/config/xdb_pubserver.conf: xDB publication server configuration

Depth

Surface

Security impact

Low — No known security impact.

xDB sc (`xdb_sc`)

Description

When xDB is detected, collects xDB Publication and Subscription server status

Report output

File /tools/xdb/sc/<service_name>_query.data: Output of 'sc query <service_name>

Depth

Surface

Security impact

Low — No known security impact.

PostgreSQL/PGD3 nstance

Current archiver stats (`postgresql_archiver`)

Description

Statistics about the archiver process's activity from pg_stat_archiver

Report output

File postgresql/archiver.out

Depth

Surface

Security impact

Low — No known security impact.

Available extensions (`postgresql_available_extensions`)

Description

List of extensions available on the server

Report output

File postgresql/available_extensions.out

Depth

Surface

Security impact

Low — No known security impact.

Current bg_writer stats (`postgresql_bgwriter`)

Description

Statistics about the background writer process's activity from pg_stat_bgwriter

Report output

File postgresql/bgwriter.out

Depth

Surface

Security impact

Low — No known security impact.

Directory with binaries (`postgresql_bin_dir`)

Description

PostgreSQL binary directory

Report output

File /postgresql/postgresql_bin_path.data: Path to the Postgres bin directory

Depth

Surface

Security impact

Low — No known security impact.

Current configuration (`postgresql_configuration`)

Description

Postgres current configuration

Report output

File postgresql/configuration.out

Depth

Surface

Security impact

Medium — postgresql.conf might contain bad security policies

Configuration files (`postgresql_configuration_files`)

Description

Postgres configuration files and the data directory path. Passwords contained in well-known connection strings are redacted for information security reasons.

Report output

File /postgresql/pg_ident.conf: Postgres ident configuration file
File /postgresql/pg_hba.conf: Postgres host-based authentication file
File /postgresql/postgresql.auto.conf: Postgres auto configuration file
File /postgresql/recovery.done: Postgres recovery.done file
File /postgresql/recovery.conf: Postgres recovery.conf file
File /postgresql/postgresql.conf: Postgres configuration file

Depth

Surface

Security impact

Medium — pg_hba.conf and pg_ident.conf might expose potential security holes, such as trusted connections.

Databases (`postgresql_databases`)

Description

List of databases in the Postgres node

Report output

File postgresql/databases.out

Depth

Surface

Security impact

Low — No known security impact.

postgresql_db_bdr_tables_and_views (`postgresql_db_bdr_tables_and_views`)

Description

Collects all the tables and views of the BDR extension, except for:

bdr.apply_log
bdr.conflict_history
bdr.consensus_kv_data
bdr.internal_node_pre_commit
bdr.replication_status
bdr.state_journal
bdr.stat_activity

Report output

File /postgresql/dbs/<dbname>/bdr/*: Content of all tables under the BDR schema

Depth

Shallow

Security impact

Low — No known security impact.

postgresql_db_pglogical_tables_and_views (`postgresql_db_pglogical_tables_and_views`)

Description

Collects all the tables and views of the pglogical extension

Report output

File /postgresql/dbs/<dbname>/pglogical/*: Content of all tables under the pglogical schema

Depth

Shallow

Security impact

Low — No known security impact.

Database/Role Setting (`postgresql_db_role_setting`)

Description

List of database/role settings in the Postgres node

Report output

File postgresql/db_role_setting.out

Depth

Shallow

Security impact

Low — No known security impact.

Node and snapshot data (`postgresql_node`)

Description

Information about the running Postgres node

Report output

File postgresql/node.out

Depth

Surface

Security impact

Low — No known security impact.

pg_config (`postgresql_pg_config`)

Description

Postgres pg_config command output

Report output

File /postgresql/pg_config.data: pg_config command output

Depth

Surface

Security impact

Low — No known security impact.

pg_controldata (`postgresql_pg_controldata`)

Description

Postgres pg_controldata information

Report output

File /postgresql/pg_controldata.data: pg_controldata command output

Depth

Surface

Security impact

Low — No known security impact.

Version (`postgresql_pg_version`)

Description

Postgres client and server version

Report output

File /postgresql/postgresql_server_version.data: Postgres server version
File /postgresql/postgresql_client_version.data: Postgres client version

Depth

Surface

Security impact

Low — No known security impact.

Current pg_prepared_xacts contents (`postgresql_prepared_xacts`)

Description

Status of prepared xacts from pg_prepared_xacts

Report output

File postgresql/prepared_xacts.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_replication_origin_status contents (`postgresql_replication_origin`)

Description

Status of replication origins from pg_replication_origin_status

Report output

File postgresql/replication_origins.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_replication_slots contents (`postgresql_replication_slots`)

Description

Replication slots from pg_replication_slots

Report output

File postgresql/replication_slots.out

Depth

Surface

Security impact

Low — No known security impact.

Roles (`postgresql_roles`)

Description

Database roles from pg_roles

Report output

File postgresql/roles.out

Depth

Shallow

Security impact

Medium — pg_roles might contain bad security policies

Current activity stats (`postgresql_running_activity`)

Description

Information related to the current activity on running processes from pg_stat_activity

Report output

File postgresql/running_activity.out

Depth

Shallow

Security impact

Low — queries in pg_stat_activity could contain user names and application names.

Active locks (`postgresql_running_locks`)

Description

List of active locks

Report output

File postgresql/running_locks.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_shmem_allocations contents (`postgresql_shmem_allocations`)

Description

Status of shared memory allocations from pg_shmem_allocations

Report output

File postgresql/shmem_allocations.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_stat_replication contents (`postgresql_stat_replication`)

Description

Replication connections from pg_stat_replication

Report output

File postgresql/replication.out

Depth

Surface

Security impact

Low — No known security impact.

Server subscription statistics (`postgresql_subscription_statistics`)

Description

Statistics of subscriptions

Report output

File postgresql/subscription_statistics.out

Depth

Shallow

Security impact

Low — No known security impact.

Server subscriptions (`postgresql_subscriptions`)

Description

List of subscriptions

Report output

File postgresql/subscriptions.out

Depth

Shallow

Security impact

Low — No known security impact.

Tablespaces (`postgresql_tablespaces`)

Description

Tablespaces information and location

Report output

File postgresql/tablespaces.out

Depth

Surface

Security impact

Low — No known security impact.

Details for every Postgres/BDR3 database

PGD1 replication slots (`postgresql_db_bdr1_replication_slots`)

Description

List of replication slots with 9.6 format for PGD1

Report output

File bdr1_replication_slots.out

Depth

Surface

Security impact

Low — No known security impact.

PGD2 replication slots (`postgresql_db_bdr2_replication_slots`)

Description

List of replication slots with 9.6 format for PGD2

Report output

File bdr2_replication_slots.out

Depth

Surface

Security impact

Low — No known security impact.

PGD conflict_history_summary aggregation (`postgresql_db_bdr3_conflict_history_summary_agg`)

Description

Collects aggregate count for all types of conflicts

Report output

File bdr_conflict_history_summary_agg.out

Depth

Surface

Security impact

Low — No known security impact.

PGD current activity stats (`postgresql_db_bdr3_stat_activity`)

Description

Information related to the current activity on running processes from bdr.stat_activity

Report output

File bdr_stat_activity.out

Depth

Shallow

Security impact

Low — queries in bdr.stat_activity could contain user names and application names.

PGD sequences (`postgresql_db_bdr_sequences`)

Description

List of the PGD sequences

Report output

File bdr_sequences.out

Depth

Surface

Security impact

Low — No known security impact.

PGD version (`postgresql_db_bdr_version`)

Description

Currently used version of PGD

Report output

File bdr_version.out

Depth

Surface

Security impact

Low — No known security impact.

Database extensions (`postgresql_db_extensions`)

Description

List of extensions in the database

Report output

File extensions.out

Depth

Shallow

Security impact

Low — No known security impact.

Database indexes (`postgresql_db_indexes`)

Description

List of indexes in the database

Report output

File indexes.out

Depth

Shallow

Security impact

Low — No known security impact.

Database procedural languages (`postgresql_db_languages`)

Description

Procedural languages in the database

Report output

File language.out

Depth

Shallow

Security impact

Low — No known security impact.

PGD monitor_group_raft (`postgresql_db_monitor_group_raft`)

Description

Check the raft status in the bdr cluster

Report output

File bdr_monitor_group_raft.out

Depth

Surface

Security impact

Low — No known security impact.

PGD monitor_group_versions (`postgresql_db_monitor_group_versions`)

Description

Check the version of all PGD nodes

Report output

File bdr_monitor_group_versions.out

Depth

Surface

Security impact

Low — No known security impact.

PGD monitor_local_replslots (`postgresql_db_monitor_local_replslots`)

Description

Checks all the replication slot status

Report output

File bdr_monitor_local_replslots.out

Depth

Surface

Security impact

Low — No known security impact.

Database operators (`postgresql_db_operators`)

Description

Operators in the database

Report output

File operator.out

Depth

Shallow

Security impact

Low — No known security impact.

Database partitioned tables (`postgresql_db_partitioned_tables`)

Description

Information about partitioned tables using declarative partitioning

Report output

File partitioned_table.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent table tuples (`postgresql_db_pem_agent`)

Description

Data from metatable pem.agent

Report output

File pem_agent.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent_config table tuples (`postgresql_db_pem_agent_config`)

Description

Data from metatable pem.agent_config

Report output

File pem_agent_config.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent_heartbeat table tuples (`postgresql_db_pem_agent_heartbeat`)

Description

Data from metatable pem.agent_heartbeat

Report output

File pem_agent_heartbeat.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent_server_binding table tuples (`postgresql_db_pem_agent_server_binding`)

Description

Data from metatable pem.agent_server_binding

Report output

File pem_agent_server_binding.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.config table tuples (`postgresql_db_pem_config`)

Description

Data from metatable pem.config

Report output

File pem_config.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.email_group table tuples (`postgresql_db_pem_email_group`)

Description

Data from metatable pem.email_group

Report output

File pem_email_group.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.email_group_option table tuples (`postgresql_db_pem_email_group_option`)

Description

Data from metatable pem.email_group_option

Report output

File pem_email_group_option.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.probe table tuples (`postgresql_db_pem_probe`)

Description

Data from metatable pem.probe

Report output

File pem_probe.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.probe_schedule table tuples (`postgresql_db_pem_probe_schedule`)

Description

Data from metatable pem.probe_schedule

Report output

File pem_probe_schedule.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.schema_version() output (`postgresql_db_pem_schema_version`)

Description

Output from function pem.schema_version()

Report output

File pem_schema_version.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.server table tuples (`postgresql_db_pem_server`)

Description

Data from metatable pem.server

Report output

File pem_server.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.server_heartbeat table tuples (`postgresql_db_pem_server_heartbeat`)

Description

Data from metatable pem.server_heartbeat

Report output

File pem_server_heartbeat.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.smtp_spool table tuples (`postgresql_db_pem_smtp_spool`)

Description

Data from metatable pem.smtp_spool

Report output

File pem_smtp_spool.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.snmp_spool table tuples (`postgresql_db_pem_snmp_spool`)

Description

Data from metatable pem.snmp_spool

Report output

File pem_snmp_spool.out

Depth

Shallow

Security impact

Low — No known security impact.

Pglogical subscription status (`postgresql_db_pglogical_subscription_status`)

Description

List of tables replicated by pglogical

Report output

File pglogical_subscription_status.out

Depth

Surface

Security impact

Low — No known security impact.

Database functions (`postgresql_db_procs`)

Description

Functions in the database

Report output

File proc.out

Depth

Shallow

Security impact

Low — No known security impact.

Database publication tables (`postgresql_db_publication_tables`)

Description

List of tables of publications of the database

Report output

File publication_tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database publications (`postgresql_db_publications`)

Description

List of publications of the database

Report output

File publications.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.events table tuples (`postgresql_db_repmgr_events`)

Description

Data from metatable repmgr.events

Report output

File repmgr/events.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.monitoring_history table tuples (`postgresql_db_repmgr_monitoring_history`)

Description

Data from metatable repmgr.monitoring_history

Report output

File repmgr/monitoring_history.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.nodes table tuples (`postgresql_db_repmgr_nodes`)

Description

Data from metatable repmgr.nodes

Report output

File repmgr/nodes.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.replication_status table tuples (`postgresql_db_repmgr_replication_status`)

Description

Data from metatable repmgr.replication_status

Report output

File repmgr/replication_status.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.show_nodes table tuples (`postgresql_db_repmgr_show_nodes`)

Description

Data from metatable repmgr.show_nodes

Report output

File repmgr/show_nodes.out

Depth

Shallow

Security impact

Low — No known security impact.

Database schema (`postgresql_db_schemas`)

Description

List of schemas in the database

Report output

File schemas.out

Depth

Shallow

Security impact

Low — No known security impact.

Database statistics (`postgresql_db_statistics`)

Description

Statistics of the database

Report output

File statistics.out

Depth

Deep

Security impact

Low — No known security impact.

Database subscription tables (`postgresql_db_subscription_tables`)

Description

List of tables of subscriptions of the database

Report output

File subscription_tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database tables (`postgresql_db_tables`)

Description

List of tables in the database

Report output

File tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database types (`postgresql_db_types`)

Description

Types in the database

Report output

File type.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_mmr_pub_group table tuples (`postgresql_db_xdb_mmr_pub_group`)

Description

Data from metatable _edb_replicator_pub.xdb_mmr_pub_group

Report output

File xdb_mmr_pub_group.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_pub_database table tuples (`postgresql_db_xdb_pub_database`)

Description

Data from metatable _edb_replicator_pub.xdb_pub_database

Report output

File xdb_pub_database.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_pub_replog table tuples (`postgresql_db_xdb_pub_replog`)

Description

Last 50 rows from metatable _edb_replicator_pub.xdb_pub_replog

Report output

File xdb_pub_replog.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_publication_subscriptionstable tuples (`postgresql_db_xdb_publication_subscriptions`)

Description

Data from metatable _edb_replicator_pub.xdb_publication_subscriptions

Report output

File xdb_publication_subscriptions.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_publications table tuples (`postgresql_db_xdb_publications`)

Description

Data from metatable _edb_replicator_pub.xdb_publications

Report output

File xdb_publications.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_mmr_pub_group table tuples (`postgresql_db_xdb_rrep_mmr_pub_group`)

Description

Data from metatable _edb_replicator_pub.rrep_mmr_pub_group

Report output

File xdb_rrep_mmr_pub_group.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_mmr_txset table tuples (`postgresql_db_xdb_rrep_mmr_txset`)

Description

Last 10 rows from metatable _edb_replicator_pub.rrep_mmr_txset

Report output

File xdb_rrep_mmr_txset.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_properties table tuples (`postgresql_db_xdb_rrep_properties`)

Description

Data from from metatable _edb_replicator_pub.rrep_properties

Report output

File xdb_rrep_properties.out

Depth:** shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_publication_tablestable tuples (`postgresql_db_xdb_rrep_publication_tables`)

Description

Data from metatable _edb_replicator_pub.rrep_publication_tables

Report output

File xdb_rrep_publication_tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_txset table tuples (`postgresql_db_xdb_rrep_txset`)

Description

Data from metatable _edb_replicator_pub.rrep_txset

Report output

File xdb_pub_rrep_txset.out

Depth

Shallow

Security impact

Low — No known security impact.

Barman (Backup and Recovery Manager)

Barman check (`barman_check`)

Description

Collects the status of the Barman check framework for all configured servers

Report output

File /barman/barman_check.data: Output of barman check

Depth

Surface

Security impact

Low — No known security impact.

Barman diagnose (`barman_diagnose`)

Description

Collects the barman diagnosis information

Report output

File /barman/diagnose.data: Output from 'barman diagnose'

Depth

Surface

Security impact

Low — No known security impact.

Barman executable location (`barman_executable`)

Description

Collects the barman executable location

Report output

File /barman/barman_location.data: The path of the main barman executable

Depth

Surface

Security impact

Low — No known security impact.

Barman module location (`barman_modules_path`)

Description

Collects the location of the barman Python modules

Report output

File /barman/barman_python_verbose.data: The list of Barman python modules

Depth

Surface

Security impact

Low — No known security impact.

Detailed breakdown of gathered data v4

GNU/Linux operating system

barman crontab/cron (barman_crontab_cron)

Description

Report output

Depth

Security impact

debug_sources (debug_sources)

Description

Report output

Depth

Security impact

EFM CLI (efm_cli)

Description

Report output

Depth

Security impact

EFM configuration (efm_configuration)

Description

Report output

Depth

Security impact

EFM systemctl (efm_systemctl)

Description

Report output

Depth

Security impact

etcd CLI (etcd_cli)

Description

Report output

Depth

Security impact

etcd configuration (etcd_configuration)

Description

Report output

Depth

Security impact

etcd systemctl (etcd_systemctl)

Description

Report output

Depth

Security impact

HARP CLI (harp_cli)

Description

Report output

Depth

Security impact

HARP configuration (harp_configuration)

Description

Report output

Depth

Security impact

HARP systemctl (harp_systemctl)

Description

Report output

Depth

Security impact

Block devices layout (linux_block_devices_layout)

Description

Report output

Depth

Security impact

Processor governor (linux_cpu_governor)

Description

Report output

Depth

Security impact

Mounted file systems and available space (linux_devices_info)

Description

Report output

Depth

Security impact

File systems configuration (linux_disk_configuration)

Description

Report output

Depth

Security impact

OS distribution, kernel and device data (linux_distro_collector)

Description

Report output

barman crontab/cron (`barman_crontab_cron`)

debug_sources (`debug_sources`)

EFM CLI (`efm_cli`)

EFM configuration (`efm_configuration`)

EFM systemctl (`efm_systemctl`)

etcd CLI (`etcd_cli`)

etcd configuration (`etcd_configuration`)

etcd systemctl (`etcd_systemctl`)

HARP CLI (`harp_cli`)

HARP configuration (`harp_configuration`)

HARP systemctl (`harp_systemctl`)

Block devices layout (`linux_block_devices_layout`)

Processor governor (`linux_cpu_governor`)

Mounted file systems and available space (`linux_devices_info`)

File systems configuration (`linux_disk_configuration`)

OS distribution, kernel and device data (`linux_distro_collector`)

Hardware (`linux_hardware_info`)

Hypervisor (`linux_hypervisor_collector`)

Kernel (`linux_kernel_info`)

Kernel limits (`linux_kernel_limits`)

Processor usage statistics (`linux_mpstat`)

Network interfaces (`linux_network_interfaces`)

Installed packages via rpm or dpkg (`linux_packages_info`)

PostgreSQL disk layout (`linux_postgresql_disk_layout`)

SELinux (`linux_sestatus`)

System identification (`linux_system_identity`)

dmesg and /proc information (`linux_system_info`)

System status - iostat (`linux_system_status_iostat`)

System status - nfsiostat (`linux_system_status_nfsiostat`)

System status - ps (`linux_system_status_ps`)