Title

The web server must record time stamps for log records to a minimum granularity of one second. (Cat II impact)

Discussion

Without sufficient granularity of time stamps, it is not possible to adequately determine the chronological order of records. Time stamps generated by the web server include date and time and must be to a granularity of one second.

Check Content

Review the web server documentation and configuration to determine if log records are time stamped to a minimum granularity of one second. Have a user generate a logable event and review the log data to determine if the web server is configured correctly. If the log data does not contain a time stamp to a minimum granularity of one second, this is a finding.

Fix Text

Configure the web server to record log events with a time stamp to a granularity of one second.

Additional Identifiers

Rule ID: SV-206426r961446_rule

Vulnerability ID: V-206426

Group Title: SRG-APP-000375

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.