V-233041

Discussion

When the container platform is started, container platform components and user services can also be started. It is important that the container platform begin auditing on startup in order to handle container platform startup events along with events for container platform components and services that begin on startup.

Check Content

Review the container platform configuration for session audits. 

Ensure audit policy for session logging at startup is enabled. 

Verify events are written to the log. 

Validate system documentation is current. 

If the container platform is not configured to meet this requirement, this is a finding.