STIGQter: STIG Summary: MarkLogic Server v9 Security Technical Implementation Guide Version: 3 Release: 2 Benchmark Date: 24 Oct 2024:

MarkLogic Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

DISA Rule

SV-220381r961398_rule

Vulnerability Number

V-220381

Group Title

SRG-APP-000359-DB-000319

Rule Version

ML09-00-007300

Severity

CAT II

CCI(s)

• CCI-001855 - Provide a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit log storage volume reaches an organization-defined percentage of repository maximum audit log storage capacity.

Weight

10

Fix Recommendation

Configure the system to notify appropriate support staff immediately upon storage volume utilization reaching 75 percent.

Use MarkLogic Ops Director with Alerts, or third-party tool to monitor storage Volume utilization/alerting.

Check Contents

Review system configuration to determine if appropriate support staff are not notified immediately upon storage volume utilization reaching 75 percent.

If the Organization is not using Ops Director, or a third-party tool for storage volume utilization/alerting, this is a finding.

Vulnerability Number

V-220381

Documentable

False

Rule Version

ML09-00-007300

Severity Override Guidance

Review system configuration to determine if appropriate support staff are not notified immediately upon storage volume utilization reaching 75 percent.

If the Organization is not using Ops Director, or a third-party tool for storage volume utilization/alerting, this is a finding.

Check Content Reference

M

Target Key

4064