STIGQter: STIG Summary: Apache Server 2.4 Windows Server Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The Apache web server must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.

DISA Rule

SV-214347r505936_rule

Vulnerability Number

V-214347

Group Title

SRG-APP-000357-WSR-000150

Rule Version

AS24-W1-000710

Severity

CAT II

CCI(s)

• CCI-001849 - The organization allocates audit record storage capacity in accordance with organization-defined audit record storage requirements.

Weight

10

Fix Recommendation

Work with the SIEM administrator to determine if the SIEM is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the Apache web server.

Check Contents

Work with SIEM administrator to determine log storage capacity.

If there is no setting within a SIEM to accommodate enough a large logging capacity, this is a finding.

Vulnerability Number

V-214347

Documentable

False

Rule Version

AS24-W1-000710

Severity Override Guidance

Work with SIEM administrator to determine log storage capacity.

If there is no setting within a SIEM to accommodate enough a large logging capacity, this is a finding.

Check Content Reference

M

Target Key

3998

Comments