CCI|CCI-003821

Implement the capability to centrally review and analyze audit records from multiple components within the system.

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Name	Plugin	Audit Name
SPLK-CL-000100 - Splunk Enterprise must be configured to aggregate log records from organization-defined devices and hosts within its scope of coverage.	Splunk	DISA STIG Splunk Enterprise 8.x for Linux v2r1 STIG REST API
SPLK-CL-000250 - Splunk Enterprise must be configured to aggregate log records from organization-defined devices and hosts within its scope of coverage.	Splunk	DISA STIG Splunk Enterprise 7.x for Windows v3r1 REST API