The web server must implement the capability to centrally review and analyze audit records from multiple components within the system.

STIG ID: SRG-APP-000745-WSR-000120  |  SRG: SRG-APP-000745 |  Severity: medium (CAT II)  |  CCI: CCI-003821 |  Vulnerability Id: V-264339

Vulnerability Discussion

Automated mechanisms for centralized reviews and analyses include security information and event management products.

Check

Verify the web server is configured to implement the capability to centrally review and analyze audit records from multiple components within the system.

If the web server is not configured to implement the capability to centrally review and analyze audit records from multiple components within the system, this is a finding.

Fix

Configure the web server to implement the capability to centrally review and analyze audit records from multiple components within the system.
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.