SharePoint must identify potentially security-relevant error conditions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-28026	SHPT-00-000810	SV-36713r2_rule	DCBP-1	Medium

Description
The error messages and usage data to be monitored should be carefully considered. The extent to which the application is able to identify and handle error conditions is guided by organizational policy and operational requirements. Usage and Health Data Collection Service Application collects data about usage and health of your farm. This information is used for Health Monitoring and this is also required for running the Web Analytics Service. If there is no Usage and Health Data Collection Service Application or the Usage and Health Data Collection Proxy is stopped, the Web Analytics Report will not show any data. SharePoint Usage and Health Data Collection Service Application must be enabled in order to detect potential security errors. The usage and health data settings are farm-wide and cannot be set for individual servers in the farm.

Description

The error messages and usage data to be monitored should be carefully considered. The extent to which the application is able to identify and handle error conditions is guided by organizational policy and operational requirements. Usage and Health Data Collection Service Application collects data about usage and health of your farm. This information is used for Health Monitoring and this is also required for running the Web Analytics Service. If there is no Usage and Health Data Collection Service Application or the Usage and Health Data Collection Proxy is stopped, the Web Analytics Report will not show any data. SharePoint Usage and Health Data Collection Service Application must be enabled in order to detect potential security errors. The usage and health data settings are farm-wide and cannot be set for individual servers in the farm.

STIG	Date
SharePoint 2010 Security Technical Implementation Guide (STIG)	2013-10-03

Details

Check Text ( C-37382r2_chk )
1. In SharePoint Central Administration, click Monitoring. 2. On the Monitoring page, in the Reporting list, click Configure usage and health data collection. 3. On the Configure web analytics and health data collection page, in the Usage Data Collection section, verify Enable usage data collection is checked. 4. In the Health Data Collection section, verify Enable health data collection is checked. 5. Mark as a finding if Enable usage data collection and Enable health data collection are not checked.

Check Text ( C-37382r2_chk )

1. In SharePoint Central Administration, click Monitoring.
2. On the Monitoring page, in the Reporting list, click Configure usage and health data collection.
3. On the Configure web analytics and health data collection page, in the Usage Data Collection section, verify Enable usage data collection is checked.
4. In the Health Data Collection section, verify Enable health data collection is checked.
5. Mark as a finding if Enable usage data collection and Enable health data collection are not checked.

Fix Text (F-32619r2_fix)
Enable and configure the Usage and Health Data Collection Service Application. 1. In SharePoint Central Administration, click Monitoring. 2. On the Monitoring page, in the Reporting list, click Configure usage and health data collection. 3. On the Configure web analytics and health data collection page, in the Usage Data Collection section, check the box for Enable usage data collection. 4. In the Health Data Collection section, check the box for Enable health data collection. 5. Click OK.

Fix Text (F-32619r2_fix)

Enable and configure the Usage and Health Data Collection Service Application.
1. In SharePoint Central Administration, click Monitoring.
2. On the Monitoring page, in the Reporting list, click Configure usage and health data collection.
3. On the Configure web analytics and health data collection page, in the Usage Data Collection section, check the box for Enable usage data collection.
4. In the Health Data Collection section, check the box for Enable health data collection.
5. Click OK.