CCI|CCI-001849

Title

Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
5.002 - Event log sizes do not meet minimum requirements. - ApplicationWindowsDISA Windows Vista STIG v6r41
5.002 - Event log sizes do not meet minimum requirements. - SecurityWindowsDISA Windows Vista STIG v6r41
5.002 - Event log sizes do not meet minimum requirements. - SetupWindowsDISA Windows Vista STIG v6r41
5.002 - Event log sizes do not meet minimum requirements. - SystemWindowsDISA Windows Vista STIG v6r41
AIX7-00-002033 - AIX must allocate audit record storage capacity to store at least one weeks worth of audit records, when audit records are not immediately sent to a central audit record storage facility.UnixDISA STIG AIX 7.x v3r1
APPL-14-001029 - The macOS system must configure audit retention to seven days.UnixDISA Apple macOS 14 (Sonoma) STIG v2r2
APPL-14-004050 - The macOS system must configure install.log retention to 365.UnixDISA Apple macOS 14 (Sonoma) STIG v2r2
APPL-15-001029 - The macOS system must configure audit retention to seven days.UnixDISA Apple macOS 15 (Sequoia) STIG v1r1
AS24-U1-000710 - The Apache web server must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.UnixDISA STIG Apache Server 2.4 Unix Server v3r1 Middleware
AS24-U1-000710 - The Apache web server must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.UnixDISA STIG Apache Server 2.4 Unix Server v3r1
AS24-W1-000710 - The Apache web server must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.WindowsDISA STIG Apache Server 2.4 Windows Server v3r1
AS24-W1-000710 - The Apache web server must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.WindowsDISA STIG Apache Server 2.4 Windows Server v2r3
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
CASA-ND-000920 - The Cisco ASA must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.CiscoDISA STIG Cisco ASA NDM v2r2
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - 800-53r5 Low
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Catalina v1.5.0 - 800-53r4 Low
CD12-00-002100 - PostgreSQL must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.UnixDISA STIG Crunchy Data PostgreSQL OS v3r1
CISC-ND-000980 - The Cisco router must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.CiscoDISA STIG Cisco IOS Router NDM v3r2
CISC-ND-000980 - The Cisco router must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.CiscoDISA STIG Cisco IOS XE Router NDM v3r2
CISC-ND-000980 - The Cisco switch must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.CiscoDISA STIG Cisco IOS XE Switch NDM v3r2
CISC-ND-000980 - The Cisco switch must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.CiscoDISA STIG Cisco IOS Switch NDM v3r2
CISC-ND-000980 - The Cisco switch must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.CiscoDISA STIG Cisco NX-OS Switch NDM v3r2
DB2X-00-007500 - DB2 must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.UnixDISA STIG IBM DB2 v10.5 LUW v2r1 OS Linux
DB2X-00-007500 - DB2 must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.WindowsDISA STIG IBM DB2 v10.5 LUW v2r1 OS Windows
EPAS-00-007900 - The EDB Postgres Advanced Server must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.PostgreSQLDBEnterpriseDB PostgreSQL Advanced Server DB v2r1
F5BI-DM-000191 - The BIG-IP appliance must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.F5DISA F5 BIG-IP Device Management STIG v2r3
JUNI-ND-000970 - The Juniper router must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.JuniperDISA STIG Juniper Router NDM v3r1
JUSX-DM-000056 - For local log files, the Juniper SRX Services Gateway must allocate log storage capacity in accordance with organization-defined log record storage requirements so that the log files do not grow to a size that causes operational issues.JuniperDISA Juniper SRX Services Gateway NDM v3r2
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - 800-53r4 Moderate
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - 800-53r4 Low
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - 800-53r5 Moderate
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - All Profiles
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - 800-53r5 High
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - 800-53r5 Low
Monterey - Configure Audit Retention to a Minimum of Seven DaysUnixNIST macOS Monterey v1.0.0 - CNSSI 1253
OL07-00-021330 - The Oracle Linux operating system must use a separate file system for the system audit data path large enough to hold at least one week of audit data.UnixDISA Oracle Linux 7 STIG v3r1