TMA-CASSANDRA-4.1
Ensure that logging is enabled
SedangLevel 1Otomatiscassandra
Deskripsi
Apache Cassandra uses Logback for logging functionality. While this can be set using nodetool setlogginglevel changes made using this method will be reverted to the level specified in the logback.xml file the next time the process restarts. The configurable logging levels are: - OFF - TRACE - DEBUG - INFO (Default) - WARN - ERROR Runs nodetool getlogginglevels (JMX on localhost:7199); passes when the ROOT logger is not OFF.
Cara pemeriksaan
Metode audit: Perintah shell
shell
out=$(nodetool getlogginglevels 2>/dev/null) || exit 1; printf '%s\n' "$out" | awk '$1 == "ROOT" {r = $2} END {if (r == "") print "no ROOT logger"; else if (toupper(r) == "OFF") print "OFF"; else print "compliant"}'- Output yang diharapkan
compliant
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Set <root level="INFO"> in logback.xml (or logback-test.xml if present) and restart Cassandra, or run nodetool setlogginglevel ROOT INFO.
Properti
- Sistem operasi
- Apa saja
- Tag
- cassandralogging
- Referensi
- CIS Apache Cassandra 5.0 Benchmark v1.1.0 - 4.1 Ensure that logging is enabled
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target cassandra