The container platform audit records must have a date and time association with all events.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-233043	SRG-APP-000096-CTR-000175	SV-233043r601623_rule		Medium

Description

Within the container platform, audit data can be generated from any of the deployed container platform components. This audit data is important when there are issues, such as security incidents, that must be investigated. To make the audit data worthwhile for the investigation of events, it is necessary to know when the event occurred. To establish the time of the event, the audit record must contain the date and time.

STIG	Date
Container Platform Security Requirements Guide	2021-12-14

Details

Check Text ( C-35979r601622_chk )
Review the container platform configuration for audit events date and time. Ensure audit policy for event date and time are enabled. Verify records showing event date and time are included in the log. Validate system documentation is current. If the date and time are not included, this is a finding.

Fix Text (F-35947r600617_fix)
Configure the container platform to include log date and time with the event. Revise all applicable system documentation.