STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must ensure that the rsyslog service is running and persistent.

DISA Rule

SV-284944r1208267_rule

Vulnerability Number

V-284944

Group Title

SRG-OS-000479-GPOS-00224

Rule Version

AZLX-23-001041

Severity

CAT II

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Start the auditd service, and enable the rsyslog service with the following commands:

$ sudo systemctl start rsyslog.service

$ sudo systemctl enable rsyslog.service

Check Contents

Verify Amazon Linux 2023 is configured so that the rsyslog service is enabled and active with the following commands:

$ sudo systemctl is-enabled rsyslog
enabled

$ sudo systemctl is-active rsyslog
active

If the service is not "enabled" and "active" this is a finding.

Vulnerability Number

V-284944

Documentable

False

Rule Version

AZLX-23-001041

Severity Override Guidance

Verify Amazon Linux 2023 is configured so that the rsyslog service is enabled and active with the following commands:

$ sudo systemctl is-enabled rsyslog
enabled

$ sudo systemctl is-active rsyslog
active

If the service is not "enabled" and "active" this is a finding.

Check Content Reference

M

Target Key

5700