Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Central Log Server must be configured to perform on-demand searches of log records for events of interest based on the content of organization-defined audit fields within log records.
Description
Discussion Text
The ability to search the log records to better view events of interest provides the persons reviewing the logs with the ability to quickly isolate and identify these events without having to review entries that are of little or no consequence to the investigation. Without this capability, forensic investigations are impeded.
This requires applications to provide the capability to search log record reports based on organization-defined criteria.
This requires applications to provide the capability to search log record reports based on organization-defined criteria.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.