Ensure that audit filters are configured properly

MoyenneNiveau 2Revue manuellemongodb

Description

MongoDB Enterprise supports auditing of various operations. When enabled, the audit facility, by default, records all auditable operations as detailed in Audit Event Actions, Details, and Results. To specify which events to record, the audit feature includes the - -auditFilter option. This check is only for Enterprise editions.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

To verify that audit filters are configured on MongoDB as per the organization's requirements, run the following command: On Ubuntu: cat /etc/mongod.conf |grep -A10 "auditLog" | grep "filter" On Windows: type mongod.conf | findstr -A10 "auditLog" | findstr "filter"

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Set the audit filters based on the organization's requirements.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: mongodbloggingaudit
Référence: CIS MongoDB 8 Benchmark v2.0.0 - 5.2 Ensure that audit filters are configured properly