Detections
Analytics
GEN005450 - The system must use a remote syslog server (log host).
Information
A syslog server (log host) receives syslog messages from one or more systems. This data can be used as an authoritative log source in the event a system is compromised and its local logs are suspect.Solution
Edit the syslog configuration file and add an appropriate remote syslog server.See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: AUDIT AND ACCOUNTABILITY
References: 800-53|AU-12, CAT|II, CCI|CCI-000136, Rule-ID|SV-26745r1_rule, STIG-ID|GEN005450, Vuln-ID|V-22455
Plugin: Unix
Control ID: 8fb45d97cc68534b8bd3962e3fbebe2c9abb4d15bb1a0e851e082620deedb179