STIGQter: STIG Summary: Central Log Server Security Requirements Guide Version: 3 Release: 4 Benchmark Date: 01 Apr 2026:

The Central Log Server must notify system administrators and ISSO when accounts are created.

DISA Rule

SV-221921r981745_rule

Vulnerability Number

V-221921

Group Title

SRG-APP-000291

Rule Version

SRG-APP-000291-AU-000200

Severity

CAT III

CCI(s)

• CCI-000015 - Support the management of system accounts using (organization-defined automated mechanisms).

Weight

10

Fix Recommendation

Configure the Central Log Server to notify system administrators and the ISSO when accounts are created.

Check Contents

Examine the configuration.

Verify that the Central Log Server is configured to notify system administrators and the ISSO when accounts are created.

If the Central Log Server is not configured to notify system administrators and ISSO when accounts are created, this is a finding.

Vulnerability Number

V-221921

Documentable

False

Rule Version

SRG-APP-000291-AU-000200

Severity Override Guidance

Examine the configuration.

Verify that the Central Log Server is configured to notify system administrators and the ISSO when accounts are created.

If the Central Log Server is not configured to notify system administrators and ISSO when accounts are created, this is a finding.

Check Content Reference

M

Target Key

2901