STIGQter: STIG Summary: Central Log Server Security Requirements Guide Version: 3 Release: 4 Benchmark Date: 01 Apr 2026:

The Central Log Server must implement an audit reduction capability that supports after-the-fact investigations of incidents.

DISA Rule

SV-263561r982409_rule

Vulnerability Number

V-263561

Group Title

SRG-APP-000760

Rule Version

SRG-APP-000760-AU-000150

Severity

CAT II

CCI(s)

• CCI-003824 - Implement an audit reduction capability that supports after-the-fact investigations of incidents.

Weight

10

Fix Recommendation

Configure the Central Log Server to implement an audit reduction capability that supports after-the-fact investigations of incidents.

Check Contents

Verify the Central Log Server is configured to implement an audit reduction capability that supports after-the-fact investigations of incidents.

If the Central Log Server is not configured to implement an audit reduction capability that supports after-the-fact investigations of incidents, this is a finding.

Vulnerability Number

V-263561

Documentable

False

Rule Version

SRG-APP-000760-AU-000150

Severity Override Guidance

Verify the Central Log Server is configured to implement an audit reduction capability that supports after-the-fact investigations of incidents.

If the Central Log Server is not configured to implement an audit reduction capability that supports after-the-fact investigations of incidents, this is a finding.

Check Content Reference

M

Target Key

2901