JBoss servers must be configured to roll over and transfer logs on a minimum weekly basis.

An XCCDF Rule

Description

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Protecting log data is important during a forensic investigation to ensure investigators can track and understand what may have occurred. Off-loading should be set up as a scheduled task but can be configured to be run manually, if other processes during the off-loading are manual. Off-loading is a common process in information systems with limited log storage capacity.

ID: SV-213559r961860_rule
Version: JBOS-AS-000735
Severity: Medium
References: CCI-001851
Updated: 5 days ago

Remediation Templates

Open the web-based management interface by opening a browser and pointing it to HTTPS://<EAP_SERVER>:9990/

Authenticate as a user with Admin rights.
Navigate to the "Configuration" tab.
Expand + Subsystems.
Expand + Core.Select "Logging".
Select the "Handler" tab.
Select  "Periodic".

If a periodic file handler does not exist, reference JBoss admin guide for instructions on how to create a file handler that will rotate logs on a daily basis. 
Create scripts that package and off-load log data at least weekly.

JBoss servers must be configured to roll over and transfer logs on a minimum weekly basis.

Description

Remediation Templates

A Manual Procedure