STIGQter STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The vCenter server must have task and event retention set to at least 30 days.

DISA Rule

SV-258959r961863_rule

Vulnerability Number

V-258959

Group Title

SRG-APP-000516

Rule Version

VCSA-80-000293

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click "Edit".

On the "Database" tab, set the value for both "Task retention" and "Event retention" to "30" days (default) or greater, as required by your site.

Click "Save".

Check Contents

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click to expand the "Database" section.

Note the "Task retention" and "Event retention" values.

If either value is configured to less than "30" days, this is a finding.

Vulnerability Number

V-258959

Documentable

False

Rule Version

VCSA-80-000293

Severity Override Guidance

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click to expand the "Database" section.

Note the "Task retention" and "Event retention" values.

If either value is configured to less than "30" days, this is a finding.

Check Content Reference

M

Target Key

5573