Detections
Analytics

GEN005450 - The system must use a remote syslog server (log host).

Information

A syslog server (log host) receives syslog messages from one or more systems. This data can be used as an authoritative log source in the event a system is compromised and its local logs are suspect.

Solution

Edit the syslog configuration file and add an appropriate remote syslog server.

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3(2), CAT|II, CCI|CCI-000136, Group-ID|V-22455, Rule-ID|SV-26745r1_rule, STIG-ID|GEN005450, Vuln-ID|V-22455

Plugin: Unix

Control ID: 24f936c76b858afd86c7e4253379bf760e065133c0f824b588d7c0bc679e3141