STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

DISA Rule

SV-246933r961392_rule

Vulnerability Number

V-246933

Group Title

SRG-APP-000357-NDM-000293

Rule Version

NAOT-AU-000001

Severity

CAT II

CCI(s)

CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

Fix Recommendation

Increase the size of the volume that is filled using the command "vol size <volume name> <size increase>".

To increase vol1 by 500MB, the command would be "vol size vol1 +500m".

Check Contents

To ensure audit record storage capacity is sufficient, use the command "df MDV*". The output from the command will show the size of the audit volumes, amount used and amount available. Sample output from the command looks like the following:

cluster ::> df MDV*

Filesystem kbytes used avail capacity Mounted on
/vol/MDV_aud_4a9d8065eac9454bbe042ffddd0df645/ 1992296 532 1991764 0% /vol/MDV_aud_4a9d8065eac9454bbe042ffddd0df645/
/vol/MDV_aud_62a9aebc8f3d4fe2990e39bb34c66999/ 1992296 384 1991912 0% /vol/MDV_aud_62a9aebc8f3d4fe2990e39bb34c66999/
/vol/MDV_aud_fdb78598bd5945ffa6f7bd1197a9f975/ 1992296 1992296 0 100% /vol/MDV_aud_fdb78598bd5945ffa6f7bd1197a9f975/

If any ONTAP volumes show 100 percent capacity, this is a finding.

ONTAP must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key