Ensure that logging of disconnections is enabled.
| Property | |
|---|---|
| Language |  |
| Severity |  |
| Service | sql |
| Provider | |
| Vulnerability Type | omission |
Description#
The configuration does not enable logging of database disconnections, resulting in a lack of records for when client sessions end. Without this logging, important diagnostic information such as session durations and abnormal disconnect patterns is unavailable.
Impact#
Missing disconnection logs limits the ability to detect performance issues, investigate potential denial-of-service (DoS) attacks, and perform forensic analysis. This can hinder incident response and allow malicious or unintended behaviors to go unnoticed, increasing operational and security risk.
Resolution#
Enable disconnection logging.