Ensure Advanced IIS logging is enabled

СреднийУровень 1Ручная проверкаiis

Описание

IIS Advanced Logging is a module which provides flexibility in logging requests and client data. It provides controls that allow businesses to specify what fields are important, easily add additional fields, and provide policies pertaining to log file rollover and Request Filtering. Manual review: the benchmark gives no reliable automated check for this control.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Browse to the location of the Advanced Logs and verify .log files are being generated. Note that logs will be written to disk after a non-determined period of time. They can be written into their specified directory immediately if, in the Log Definition, the Publish real- time events and Write to disk options are selected.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

IIS Advanced Logging can be configured for servers, Web sites, and directories in IIS Manager. To enable Advanced Logging using the UI: 1. Open Internet Information Services (IIS) Manager 2. Click the server in the Connections pane 3. Double-click the Logging icon on the Home page 4. Click Select Fields The fields that will be logged need to be configured using the Add or Edit Fields button. Note: There may be performance considerations depending on the extent of the configuration.

Свойства

Операционные системы: Любая
Теги: iislogging
Источник: CIS Microsoft IIS 10 Benchmark v1.2.1 - 5.2 Ensure Advanced IIS logging is enabled