VMware ESXi
TMA-VMWARE-4.5
Host must deactivate log filtering
Açıklama
Log filtering can be employed to diminish the frequency of repetitive log entries and to preclude specific log events entirely. By employing the Syslog.global.logFilters configuration parameter, one can stipulate filtering criteria, which when met, will cause the designated log events to be excluded from the system logs. The audit reads Syslog.global.logFiltersEnable with esxcli and requires false (0). Runs in the ESXi Shell (busybox sh) as root.
Nasıl denetlenir
Denetim yöntemi: Kabuk komutu
out=$(esxcli system settings advanced list -o /Syslog/global/logFiltersEnable 2>/dev/null) || exit 1
v=$(printf '%s\n' "$out" | awk '$1=="Int" && $2=="Value:" {print $3; exit}')
case "$v" in ''|*[!0-9-]*) echo '/Syslog/global/logFiltersEnable: no integer value'; exit 1 ;; esac
if [ "$v" -eq 0 ]; then echo compliant; else echo "/Syslog/global/logFiltersEnable = $v (expected false/0)"; fi- Beklenen çıktı
compliant
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
1. Disable log filtering 2. execute command: esxcli system syslog config logfilter set --log- filtering-enabled=false 3. execute: Get-VMHost | Get-AdvancedSetting -Name "Syslog.global.logFiltersEnable" passing value is: False
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- vmwareesxilogging
- Referans
- CIS VMware ESXi 8.0 Benchmark v1.4.0 - 4.5 Host must deactivate log filtering
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
tmaegis scan --target vmware