STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SQL Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

DISA Rule

SV-271344r1111082_rule

Vulnerability Number

V-271344

Group Title

SRG-APP-000359-DB-000319

Rule Version

SQLI-22-011000

Severity

CAT II

CCI(s)

• CCI-001855 - Provide a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit log storage volume reaches an organization-defined percentage of repository maximum audit log storage capacity.

Weight

10

Fix Recommendation

Use operating system alerting mechanisms, SQL Agent, Operations Management tools, and/or third-party tools to configure the system to notify appropriate support staff immediately upon storage volume utilization reaching 75 percent.

Check Contents

The operating system and SQL Server offer a number of methods for checking the drive or volume free space. Locate the destination drive where SQL Audits are stored and review system configuration.

If no alert exists to notify support staff in the event the SQL Audit drive reaches 75 percent, this is a finding.

Vulnerability Number

V-271344

Documentable

False

Rule Version

SQLI-22-011000

Severity Override Guidance

The operating system and SQL Server offer a number of methods for checking the drive or volume free space. Locate the destination drive where SQL Audits are stored and review system configuration.

If no alert exists to notify support staff in the event the SQL Audit drive reaches 75 percent, this is a finding.

Check Content Reference

M

Target Key

5677