MarkLogic Server must generate audit records when successful logons or connections occur.
An XCCDF Rule
Description
For completeness of forensic analysis, it is necessary to track who/what (a user or other principal) logs on to the DBMS.
- ID
- SV-220408r961824_rule
- Version
- ML09-00-011100
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure MarkLogic audit settings to generate an audit record each time a user (or other principal) logs on or connects to the DBMS.
Perform the fix from the MarkLogic Server Admin Interface with a user that holds administrative-level privileges.
1. Click the Groups icon.
2. Click the group in which the configuration to check resides (e.g., Default).