UCF STIG Viewer Logo

tc Server ALL log files must be moved to a permanent repository in accordance with site policy.


Finding ID Version Rule ID IA Controls Severity
V-240846 VRAU-TC-000750 SV-240846r879731_rule Medium
A web server will typically utilize logging mechanisms for maintaining a historical log of activity that occurs within a hosted application. This information can then be used for diagnostic purposes, forensics purposes, or other purposes relevant to ensuring the availability and integrity of the hosted application. Log files must be periodically moved from the web server to a permanent storage location. This serves two beneficial purposes. First, the web server's resources are freed up for productions. Also, this ensures that the site has, and enforces, policies designed to preserve the integrity of historical logs.
VMware vRealize Automation 7.x tc Server Security Technical Implementation Guide 2023-10-03


Check Text ( C-44079r854849_chk )
Interview the ISSO.

Review the site policy for moving log files from the web server to a permanent repository. Ensure that log files are being moved from the web server in accordance with the site policy.

If the site does not have a policy for periodically moving log files to an archive repository or such policy is not being enforced, this is a finding.
Fix Text (F-44038r674281_fix)
Develop and enforce a site procedure for moving log files periodically from the web server to a permanent repository in accordance with site retention policies.