Detections
Analytics

5.002 - Event log sizes do not meet minimum requirements. - Application

Information

Inadequate log size will cause the log to fill up quickly and require frequent clearing by administrative personnel.

Solution

Configure the following policy values as listed below-

Computer Configuration -> Administrative Templates -> Windows Components -> Event Log Service ->

Application -> 'Maximum Log Size (KB)' will be set to 'Enabled-32768'
Security -> 'Maximum Log Size (KB)' will be set to 'Enabled-81920'
Setup -> 'Maximum Log Size (KB)' will be set to 'Enabled-32768'
System -> 'Maximum Log Size (KB)' will be set to 'Enabled-32768'

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CAT|II, CCI|CCI-001849, Rule-ID|SV-16946r1_rule, STIG-ID|5.002, Vuln-ID|V-1118

Plugin: Windows

Control ID: acf91194c75d4521dcd99f1cffd3237f27478749d5c620ae53b09aadd0710c68