STIGQter: STIG Summary: MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

MongoDB must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

DISA Rule

SV-265939r1028603_rule

Vulnerability Number

V-265939

Group Title

SRG-APP-000359-DB-000319

Rule Version

MD7X-00-007300

Severity

CAT II

CCI(s)

CCI-001855 - Provide a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit log storage volume reaches an organization-defined percentage of repository maximum audit log storage capacity.

Weight

Fix Recommendation

View the mongodb configuration file (default location: /etc/mongod.conf) and view the "auditlog.path" to identify the storage volume.

Install OS or other organization approved third-party monitoring software.

Configure the required alert in the monitoring software to send an alert where storage volume holding the auditLog file utilization reaches 75 percent.

Check Contents

Verify that auditing is enabled in the mongodb configuration file (default location: /etc/mongod.conf) and view the "auditlog.path" to identify the storage volume.

Verify that OS or other organization approved third-party monitoring software is installed.

Verify that the required alert in the monitoring software to send an alert where storage volume holding the auditLog file utilization reaches 75 percent.

If appropriate support staff are not notified immediately upon storage volume utilization reaching 75 percent, this is a finding.

Vulnerability Number

V-265939

Documentable

False

Rule Version

MD7X-00-007300

Severity Override Guidance

Check Content Reference

Target Key

5637