UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must use a remote syslog server (loghost).


Overview

Finding ID Version Rule ID IA Controls Severity
V-22455 GEN005450 SV-45985r1_rule Medium
Description
A syslog server (loghost) receives syslog messages from one or more systems. This data can be used as an authoritative log source in the event a system is compromised and its local logs are suspect.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2016-12-20

Details

Check Text ( C-43268r1_chk )
Check the syslog configuration file for remote syslog servers.
# grep '@' /etc/rsyslog.conf /etc/rsyslog.d/*.conf | grep -v '^#'

If no line is returned, this is a finding.
Fix Text (F-39351r1_fix)
Edit the syslog configuration file and add an appropriate remote syslog server.