GEN005450 - The system must use a remote syslog server (log host).

Information

A syslog server (log host) receives syslog messages from one or more systems. This data can be used as an authoritative log source in the event a system is compromised and its local logs are suspect.

Solution

Edit the syslog configuration file and add an appropriate remote syslog server.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3(2), CAT|II, CCI|CCI-000136, Rule-ID|SV-26745r1_rule, STIG-ID|GEN005450, Vuln-ID|V-22455

Plugin: Unix

Control ID: 8fb45d97cc68534b8bd3962e3fbebe2c9abb4d15bb1a0e851e082620deedb179