STIGQter: STIG Summary: Splunk Enterprise 7.x for Windows Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

Splunk Enterprise idle session timeout must be set to not exceed 15 minutes.

DISA Rule

SV-221937r508660_rule

Vulnerability Number

V-221937

Group Title

SRG-APP-000389-AU-000180

Rule Version

SPLK-CL-000180

Severity

CAT III

CCI(s)

• CCI-002038 - The organization requires users to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.

Weight

10

Fix Recommendation

Select Settings >> Server Settings >> General Settings and set Session timeout to 15 minutes or less.

Check Contents

Select Settings >> Server Settings >> General Settings and verify that Session timeout is set to 15 minutes or less.

If Splunk is not configured to 15 minutes or less, this is a finding.

Vulnerability Number

V-221937

Documentable

False

Rule Version

SPLK-CL-000180

Severity Override Guidance

Select Settings >> Server Settings >> General Settings and verify that Session timeout is set to 15 minutes or less.

If Splunk is not configured to 15 minutes or less, this is a finding.

Check Content Reference

M

Target Key

4082

Comments