4.2.3 Ensure rsyslog or syslog-ng is installed

Information

The security enhancements of rsyslog and syslog-ng such as connection-oriented (i.e. TCP) transmission of logs, the option to log to database formats, and the encryption of log data en route to a central logging server) justify installing and configuring the package.

Solution

Install rsyslog or syslog-ng using one of the following commands:
# yum install rsyslog
# yum install syslog-ng

See Also

https://workbench.cisecurity.org/files/1863

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-2, CSCv6|6.2

Plugin: Unix

Control ID: 111bbbce859b7d2c29b92ca2640b003fe99d6f8d90fdabf09a22d4e22fc96ae8