2.2.6 Set 'service timestamps debug datetime'

Information

Configure the system to apply a time stamp to debugging messages or system logging messages

Including timestamps in log messages allows correlating events and tracing network attacks across multiple devices. Enabling service timestamp to mark the time log messages were generated simplifies obtaining a holistic view of events enabling faster troubleshooting of issues or attacks.

Solution

Configure debug messages to include timestamps.

hostname(config)#service timestamps debug datetime {<em>msec</em>} show-timezone

Impact:

Logging is an important process for an organization managing technology risk and establishing a timeline of events is critical. The 'service timestamps' command sets the date and time on entries sent to the logging host and enforces the logging process.

See Also

https://workbench.cisecurity.org/benchmarks/12917

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, 800-53|AU-3(1), 800-53|AU-7, 800-53|AU-12, CSCv7|6.3

Plugin: Cisco

Control ID: 85077c3826cf502096c7bc1805c82e4b4f6fe1fd6c329d96d4c2ec61daf48297