STIGQter: STIG Summary: Apache Server 2.4 UNIX Server Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The Apache web server must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.

DISA Rule

SV-214262r612240_rule

Vulnerability Number

V-214262

Group Title

SRG-APP-000357-WSR-000150

Rule Version

AS24-U1-000710

Severity

CAT II

CCI(s)

• CCI-001849 - The organization allocates audit record storage capacity in accordance with organization-defined audit record storage requirements.

Weight

10

Fix Recommendation

Work with the SIEM administrator to determine if the SIEM is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.

Check Contents

Work with SIEM administrator to determine log storage capacity.

If there is no setting within a SIEM to accommodate enough a large logging capacity, this is a finding.

Vulnerability Number

V-214262

Documentable

False

Rule Version

AS24-U1-000710

Severity Override Guidance

Work with SIEM administrator to determine log storage capacity.

If there is no setting within a SIEM to accommodate enough a large logging capacity, this is a finding.

Check Content Reference

M

Target Key

3996

Comments