The application server must produce a system-wide (logical or physical) audit trail composed of audit records in a standardized format.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35140	SRG-APP-000088-AS-000049	SV-46427r1_rule		Low

Description
Audit records can be generated from various components within the application server. The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of the list of all events for which the system is capable of generating audit records (i.e., auditable events). Application server audit events may include, but are not limited to HTTP, Database, and XML parsing activity. The application server must be capable of producing audit records in a standardized format which includes all application server functionality.

Description

Audit records can be generated from various components within the application server. The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of the list of all events for which the system is capable of generating audit records (i.e., auditable events). Application server audit events may include, but are not limited to HTTP, Database, and XML parsing activity. The application server must be capable of producing audit records in a standardized format which includes all application server functionality.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43527r1_chk )
Review the AS configuration to determine if the AS produces a system-wide (logical or physical) audit trail composed of audit records in a standardized format. If the AS does not produce a system-wide (logical or physical) audit trail composed of audit records in a standardized format, this is a finding.

Fix Text (F-39691r1_fix)
Configure the AS to produce a system-wide (logical or physical) audit trail composed of audit records in a standardized format.