Free DISA STIG and SRG Library | Vaulted

V-57433

The application server must record time stamps for log records that meet a granularity of one second for a minimum degree of precision.

Finding ID
SRG-APP-000375-AS-000211
Rule ID
SV-71705r2_rule
Severity
Cat II
CCE
(None)
Group Title
SRG-APP-000375-AS-000211
CCI
CCI-001889
Target Key
(None)
Documentable
No
Discussion

To investigate an incident, the log records should be easily put into chronological order. Without sufficient granularity of time stamps, the chronological order cannot be determined. Time stamps generated by the application server include date and time. Granularity of time measurements refers to the degree of synchronization between information system clocks and reference clocks.

Fix Text

Configure the application server to use time stamps for log records that can meet a granularity of one second.

Check Content

Review the application server documentation and configuration files to determine if time stamps for log records meet a granularity of one second. If the time stamp cannot generate to a one-second granularity, this is a finding.