Detections
Analytics

800-53|AU-5b.

Title

RESPONSE TO AUDIT PROCESSING FAILURES

Description

Takes the following additional actions: [Assignment: organization-defined actions to be taken (e.g., shut down information system, overwrite oldest audit records, stop generating audit records)].

Reference Item Details

Category: AUDIT AND ACCOUNTABILITY

Family: AUDIT AND ACCOUNTABILITY

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.6 IBMW-LS-000230UnixCIS IBM WebSphere Liberty Server STIG v1.0.0 CAT II
1.12 MADB-10-001700UnixCIS MariaDB Enterprise 10.x STIG v1.1.0 CAT II Unix
1.13 MADB-10-001800MySQLDBCIS MariaDB Enterprise 10.x STIG v1.1.0 CAT II MySQLDB
1.31 SOL-11.1-010420UnixCIS Solaris 11 SPARC STIG v1.0.0 CAT II
1.31 SOL-11.1-010420UnixCIS Solaris 11 X86 STIG v1.0.0 CAT II
1.35 APPL-14-001010UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.36 APPL-15-001010UnixCIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II
1.49 APPL-14-001031UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.50 APPL-15-001031UnixCIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II
1.123 UBTU-22-653030UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.147 SLES-15-030590UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.155 OL09-00-000820UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.209 OL08-00-030040UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.210 OL08-00-030060UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.369 RHEL-09-653020UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.370 RHEL-09-653025UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.376 RHEL-09-653055UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.418 ALMA-09-054030UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.419 ALMA-09-054140UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.420 ALMA-09-054250UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.421 ALMA-09-054360UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.422 ALMA-09-054470UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.423 ALMA-09-054580UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.443 RHEL-09-654265UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
6.2.2.3 Ensure system is disabled when audit logs are fullUnixCIS Amazon Linux 2 v4.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Oracle Linux 10 v1.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Rocky Linux 8 v3.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS AlmaLinux OS 10 v1.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Oracle Linux 10 v1.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Oracle Linux 8 v4.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Oracle Linux 8 v4.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Red Hat Enterprise Linux 10 v1.0.1 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Rocky Linux 8 v3.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Red Hat Enterprise Linux 10 v1.0.1 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS AlmaLinux OS 8 v4.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS AlmaLinux OS 8 v4.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Red Hat Enterprise Linux 8 v4.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Red Hat Enterprise Linux 8 v4.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Rocky Linux 10 v1.0.0 L2 Server
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS Rocky Linux 10 v1.0.0 L2 Workstation
6.3.2.3 Ensure system is disabled when audit logs are fullUnixCIS AlmaLinux OS 10 v1.0.0 L2 Server
ALMA-09-054030 - AlmaLinux OS 9 audit system must take appropriate action when an error writing to the audit storage volume occurs.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
ALMA-09-054140 - AlmaLinux OS 9 audit system must take appropriate action when the audit storage volume is full.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
ALMA-09-054250 - AlmaLinux OS 9 must take appropriate action when a critical audit processing failure occurs.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
ALMA-09-054360 - AlmaLinux OS 9 audit system must make full use of the audit storage space.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
ALMA-09-054470 - AlmaLinux OS 9 audit system must take appropriate action when the audit files have reached maximum size.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
ALMA-09-054580 - AlmaLinux OS 9 audit system must retain an optimal number of audit records.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6