The system must use a remote syslog server (log host).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-227889	GEN005450	SV-227889r603266_rule		Medium

Description
A syslog server (log host) receives syslog messages from one or more systems. This data can be used as an authoritative log source in the event a system is compromised and its local logs are suspect.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2020-12-04

Details

Check Text ( C-30051r490066_chk )
Check the syslog configuration file for remote syslog servers. # grep '@' /etc/syslog.conf | grep -v '^#' If no line is returned, this is a finding.

Fix Text (F-30039r490067_fix)
Edit the syslog configuration file and add an appropriate remote syslog server.