The vAMI log records must be backed up at least every seven days onto a different system or system component than the system or component being logged.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-90209	VRAU-VA-000160	SV-100859r1_rule		Medium

Description
Protection of log data includes assuring log data is not accidentally lost or deleted. Backing up log records to a different system or onto separate media from the system that the vAMI is actually running on helps to assure that in the event of a catastrophic system failure, the log records will be retained.

STIG	Date
VMW vRealize Automation 7.x vAMI Security Technical Implementation Guide	2018-10-12

Details

Check Text ( C-89901r1_chk )
Interview the ISSO and/or the SA. Determine if there is a local procedure to back up log records at least every seven days onto a different system. If a procedure does not exist or is not being followed, this is a finding.

Fix Text (F-96951r1_fix)
Develop and implement a site procedure to back up the log data and records to a different system or separate media at least every seven days.