STIGQter: STIG Summary: Nutanix Acropolis Application Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AOS must off-load log records onto a different system or media from the system being logged.

DISA Rule

SV-279424r1191058_rule

Vulnerability Number

V-279424

Group Title

SRG-APP-000358-AS-000064

Rule Version

NXAC-AS-000014

Severity

CAT II

CCI(s)

CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

Fix Recommendation

Configure the Nutanix VM application server to off-load log records onto a different system by running the following command:

$ ncli rsyslog-config add-server name=<remote_server_name> relp-enabled=<true | false> ip-address=<remote_ip_address> port=<port_num> network-protocol=<tcp | udp>

Check Contents

Confirm the Nutanix VM application server is configured to off-load log records onto a different system.

$ ncli rsyslog-config ls-servers

If no remote syslog servers are defined, this is a finding.

Vulnerability Number

V-279424

Documentable

False

Rule Version

NXAC-AS-000014

Severity Override Guidance

Confirm the Nutanix VM application server is configured to off-load log records onto a different system.

$ ncli rsyslog-config ls-servers

If no remote syslog servers are defined, this is a finding.

Check Content Reference

Target Key

5729