Detections
Analytics

CCI|CCI-000139

Title

Alert organization-defined personnel or roles within an organization-defined time period in the event of an audit logging process failure.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.9 PHTN-40-000021UnixCIS VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v1.0.0 CAT II
1.28 SOL-11.1-010390UnixCIS Solaris 11 X86 STIG v1.0.0 CAT I
1.28 SOL-11.1-010390UnixCIS Solaris 11 SPARC STIG v1.0.0 CAT I
1.48 APPL-14-001030UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.48 APPL-26-001030UnixCIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II
1.69 RHEL-10-200690UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.72 RHEL-10-200691UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.113 AZLX-23-002215UnixCIS Amazon Linux 2023 STIG v1.0.0 CAT II
1.122 UBTU-22-653025UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT III
1.145 SLES-15-030570UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.146 SLES-15-030580UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.154 OL09-00-000815UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.155 OL09-00-000820UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.156 OL09-00-000825UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.173 RHEL-10-500035UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.176 UBTU-24-900980UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT III
1.178 RHEL-09-252060UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.183 RHEL-10-500210UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.207 OL08-00-030020UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.208 OL08-00-030030UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.307 OL09-00-002405UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.339 RHEL-10-700670UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.379 RHEL-09-653070UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.390 RHEL-09-653125UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.416 ALMA-09-053810UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.417 ALMA-09-053920UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.443 RHEL-09-654265UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
3.092 - The system must generate an audit event when the audit log reaches a percentage of full threshold.WindowsDISA Windows Vista STIG v6r41
4.1.2.10 Ensure the auditing processing failures are handled - System Administrator [SA] and Information System Security Officer [ISSO] at a minimum in the event of an audit processing failure.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.2.10 Ensure the auditing processing failures are handled.UnixCIS Amazon Linux 2 STIG v2.0.1 STIG
AIX7-00-002008 - AIX must be configured to generate an audit record when 75% of the audit file system is full.UnixDISA IBM AIX 7.x STIG v3r2
ALMA-09-053810 - AlmaLinux OS 9 System Administrator (SA) and/or information system security officer (ISSO) (at a minimum) must be alerted of an audit processing failure event.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
ALMA-09-053920 - AlmaLinux OS 9 must have mail aliases to notify the information system security officer (ISSO) and system administrator (SA) (at a minimum) in the event of an audit processing failure.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
APPL-14-001030 - The macOS system must configure audit capacity warning.UnixDISA Apple macOS 14 Sonoma STIG v2r4
APPL-15-001030 - The macOS system must configure audit capacity warning.UnixDISA Apple macOS 15 Sequoia STIG v1r7
APPL-26-001030 - The macOS system must configure audit capacity warning.UnixDISA Apple macOS 26 Tahoe STIG v1r2
AS24-U1-000160 - The Apache web server must use a logging mechanism that is configured to alert the Information System Security Officer (ISSO) and System Administrator (SA) in the event of a processing failure.UnixDISA STIG Apache Server 2.4 Unix Server v3r2 Middleware
AS24-U1-000160 - The Apache web server must use a logging mechanism that is configured to alert the Information System Security Officer (ISSO) and System Administrator (SA) in the event of a processing failure.UnixDISA STIG Apache Server 2.4 Unix Server v3r2
AS24-W1-000160 - The Apache web server must use a logging mechanism that is configured to alert the (ISSO) and System Administrator (SA) in the event of a processing failure.WindowsDISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000160 - The Apache web server must use a logging mechanism that is configured to alert the (ISSO) and System Administrator (SA) in the event of a processing failure.WindowsDISA STIG Apache Server 2.4 Windows Server v3r4
Big Sur - Alert Audit Processing FailureUnixNIST macOS Big Sur v1.4.0 - All Profiles
Catalina - Alert Audit Processing FailureUnixNIST macOS Catalina v1.5.0 - All Profiles
DKER-EE-001590 - Docker Enterprise must alert the ISSO and SA (at a minimum) in the event of an audit processing failure.UnixDISA STIG Docker Enterprise 2.x Linux/Unix v2r2
F5BI-DM-000067 - The BIG-IP appliance must be configured to alert the ISSO and SA (at a minimum) in the event of an audit processing failure.F5DISA F5 BIG-IP Device Management STIG v2r4
GEN002719 - The audit system must alert the SA in the event of an audit processing failure - '/etc/audit/auditd.conf disk_error_action'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN002719 - The audit system must alert the SA in the event of an audit processing failure - '/etc/audit/auditd.conf disk_error_action'UnixDISA STIG for Oracle Linux 5 v2r1
GEN002719 - The audit system must alert the SA in the event of an audit processing failure - '/etc/audit/auditd.conf disk_full_action'UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN002719 - The audit system must alert the SA in the event of an audit processing failure - '/etc/audit/auditd.conf disk_full_action'UnixDISA STIG for Oracle Linux 5 v2r1
GEN002719 - The audit system must alert the SA in the event of an audit processing failure.UnixDISA STIG Solaris 10 SPARC v2r4
GEN002719 - The audit system must alert the SA in the event of an audit processing failure.UnixDISA STIG Solaris 10 X86 v2r4