Detections
Analytics

7.25 Virtual machines must enable diagnostic logging

Information

Enabling diagnostic logging on virtual machines facilitates forensic analysis and troubleshooting by collecting necessary operational data. The parameter governing this behavior is Enable Logging with a recommended setting of TRUE.

Diagnostic logging is crucial for identifying and analyzing issues that may arise within a virtual machine environment. It supports timely resolution of problems, thus maintaining system integrity and operational efficiency.

Solution

To remediate this recommendation, set logging to TRUE for affected VMs using Set-AdvancedSetting or create the setting with New-AdvancedSetting if necessary. Verify new VM log entries are generated.

Impact:

There is no negative functional impact identified for enabling diagnostic logging. This control significantly aids in issue resolution, enhancing overall system reliability and performance.

See Also

https://workbench.cisecurity.org/benchmarks/26357

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, 800-53|AU-3(1), 800-53|AU-7, 800-53|AU-12, CSCv7|6.3

Plugin: VMware

Control ID: 83d909f8bff2475982334023d6b813ff1ce18ef3b0f83dcbdb14ad7d090b5a3f