Detections
Analytics
GEN005450 - The system must use a remote syslog server (loghost) - syslog.conf
Information
A syslog server (loghost) receives syslog messages from one or more systems. This data can be used as an authoritative log source in the event a system is compromised and its local logs are suspect.Solution
Edit the syslog or rsyslog configuration file and add an appropriate remote syslog server.See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: AUDIT AND ACCOUNTABILITY
References: 800-53|AU-3(2), CAT|II, CCE|CCE-4260-6, CCI|CCI-000136, Group-ID|V-22455, Rule-ID|SV-37811r2_rule, STIG-ID|GEN005450, Vuln-ID|V-22455
Plugin: Unix
Control ID: 8c6177bbbfd8c542bca8c88ff0415e675eeedac01e177600ba146313d4b3e591