Rotate your device back to portrait to use STIG Vault.
The Application Security and Development Security Technical Implementation Guide (V6 R5) has 286 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Examine the application design documentation and interview the application administrator to identify application logging behavior.
If the application is writing to an existing log or log file:
Open and monitor the application log.
Start the application service and view the log entries.
Log entries indicating the application is starting should commence as soon as the application starts. Determine if the log events correlate with the time the application was started and if event log entries include an application start up sequence of events.
If the application writes events to a new log on startup:
Identify location logs are written to, start the application and then identify and access the new log.
Determine if the log events correlate with the time the application was started and if event log entries include an application start up sequence of events.
If the application does not begin logging events upon start up, this is a finding.
Configure the application to begin logging application events as soon as the application starts up.