The vAMI log records must be backed up at least every seven days onto a different system or system component than the system or component being logged.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-240933	VRAU-VA-000160	SV-240933r879582_rule		Medium

Description
Protection of log data includes assuring log data is not accidentally lost or deleted. Backing up log records to a different system or onto separate media from the system that the vAMI is actually running on helps to assure that in the event of a catastrophic system failure, the log records will be retained.

STIG	Date
VMware vRealize Automation 7.x vAMI Security Technical Implementation Guide	2023-09-12

Details

Check Text ( C-44166r675964_chk )
Interview the ISSO and/or the SA. Determine if there is a local procedure to back up log records at least every seven days onto a different system. If a procedure does not exist or is not being followed, this is a finding.

Fix Text (F-44125r675965_fix)
Develop and implement a site procedure to back up the log data and records to a different system or separate media at least every seven days.