TMA-MONGODB-5.2
Ensure that audit filters are configured properly
Beschreibung
MongoDB Enterprise supports auditing of various operations. When enabled, the audit facility, by default, records all auditable operations as detailed in Audit Event Actions, Details, and Results. To specify which events to record, the audit feature includes the - -auditFilter option. This check is only for Enterprise editions.
So wird geprüft
Prüfmethode: Manuelle Prüfung
Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.
To verify that audit filters are configured on MongoDB as per the organization's requirements, run the following command: On Ubuntu: cat /etc/mongod.conf |grep -A10 "auditLog" | grep "filter" On Windows: type mongod.conf | findstr -A10 "auditLog" | findstr "filter"
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Set the audit filters based on the organization's requirements.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- mongodbloggingaudit
- Referenz
- CIS MongoDB 8 Benchmark v2.0.0 - 5.2 Ensure that audit filters are configured properly