The application server must automatically record an event in the device audit log each time the server is started.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35221	SRG-APP-000130-AS-000089	SV-46508r1_rule		Medium

Description
If the auditing subsystem is not automatically started when the application server is started, security-related events could go unnoticed. The AS auditing subsystem must automatically start when the AS processes are started.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43593r1_chk )
Check the AS documentation and logs to determine if the auditing subsystem starts automatically when the AS processes are started. If the AS is not configured to automatically start auditing processes, this is a finding.

Fix Text (F-39767r1_fix)
Configure the AS to automatically start auditing processes when the AS is started.