Detections
Analytics

5.1.1.2 Ensure rsyslog service is enabled

Information

Once the rsyslog package is installed, ensure that the service is enabled.

If the rsyslog service is not enabled to start on boot, the system will not capture logging events.

Solution

Run the following command to enable rsyslog :

# systemctl --now enable rsyslog

See Also

https://workbench.cisecurity.org/benchmarks/12705

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-2, 800-53|AU-3, 800-53|AU-7, 800-53|AU-12, CSCv7|6.2, CSCv7|6.3

Plugin: Unix

Control ID: 0b2fde3a88c74503648f58b906e46c8a907f4158ff5da388f80c32673e7fd588