Rule ID
SV-224042r959008_rule
Version
V9R8
CCIs
The task of allocating audit record storage capacity is usually performed during initial installation of the operating system.
Ask the system administrator for the procedure to offload SMF files to a different system or media than the system being audited. If the procedure does not exist, this is a finding.
Develop a procedure to offload SMF files to a different system or media than the system being audited.