STIGQter: STIG Summary: MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

MongoDB must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

DISA Rule

SV-279376r1179479_rule

Vulnerability Number

V-279376

Group Title

SRG-APP-000359-DB-000319

Rule Version

MD8X-00-006900

Severity

CAT II

CCI(s)

CCI-001855 - Provide a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit log storage volume reaches an organization-defined percentage of repository maximum audit log storage capacity.

Weight

Fix Recommendation

View the mongodb configuration file (default location /etc/mongod.conf) and view the "auditlog.path" to identify the storage volume.

Install OS or other organization-approved third-party monitoring software.

Configure the required alert in the monitoring software to send an alert when storage volume holding the auditLog file utilization reaches 75 percent.

Check Contents

Verify auditing is enabled in the mongodb configuration file (default location /etc/mongod.conf) and view the "auditlog.path" to identify the storage volume.

Verify OS or other organization approved third-party monitoring software is installed.

Verify the required alert in the monitoring software is set to send when storage volume holding the auditLog file utilization reaches 75 percent.

If appropriate support staff are not notified immediately upon storage volume utilization reaching 75 percent, this is a finding.

Vulnerability Number

V-279376

Documentable

False

Rule Version

MD8X-00-006900

Severity Override Guidance

Check Content Reference

Target Key

5728