The application server must alert designated individual organizational officials in the event of an audit processing failure.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35186	SRG-APP-000108-AS-000067	SV-46473r1_rule		Low

Description
Audit processing failures include, but are not limited to, failures in the application server log capturing mechanisms or audit storage capacity being reached or exceeded. In some instances, it is preferred to send alarms to individuals rather than to an entire group. Application servers must be able to trigger an alarm and send that alert to designated individuals in the event there is an AS audit processing failure.

Description

Audit processing failures include, but are not limited to, failures in the application server log capturing mechanisms or audit storage capacity being reached or exceeded. In some instances, it is preferred to send alarms to individuals rather than to an entire group. Application servers must be able to trigger an alarm and send that alert to designated individuals in the event there is an AS audit processing failure.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43566r1_chk )
Review AS audit configuration and organization policy. If policy requires individual notification, verify the AS sends alerts to designated individual organizational officials in the event of an audit processing failure. If policy requires individual notifications and the AS is not configured to meet this requirement, this is a finding.

Fix Text (F-39734r1_fix)
Configure the AS audit feature to alert designated organizational officials in the event of an audit processing failure.