Ensure that Logstore data retention period is set 365 days or greater

中等級 2人工審核alibaba

說明

Ensure Activity Log Retention is set for 365 days or greater Logstore life cycle controls how your activity log is exported and retained. It is recommended to retain your activity log for 365 days or more in order to have time to respond to any incidents. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Perform below steps to ensure the log retention is set to 365 days or greater. 1. Logon to SLS Console. 2. In the Projects section, click the target project name. On the page that appears, click the plus sign (+) next to the search box. 3. In the dialog box that appears, check whether the Permanent Storage is turned on, which means the log data will be stored permanently, or else 4. Ensure the Data Retention Period is set to 365 or greater.

修補方式

修補方法: 操作指南或基礎設施修補檔

Perform below steps to ensure the log retention is set to 365 days or greater. 1. Logon to SLS Console. 2. Find the project in the Projects section, and then click the target project name. 3. On the page that appears, click Modify a Logstore icon next to the Logstore, and then choose Modify. 4. On the page that appears, click Modify, modify the Data Retention Period, to 365 or greater and then click Save.

屬性

作業系統: 不限
標籤: alibabalogging
參考資料: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 2.23 Ensure that Logstore data retention period is set 365 days or greater