Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 10.0 Security Technology Implementation Guide
  6. Application STIG
  7. IIST-SI-000238: Use a logging mechanism

IIST-SI-000238: Use a logging mechanism

The IIS 10.0 website must use a logging mechanism configured to allocate log record storage capacity large enough to accommodate the logging requirements of the IIS 10.0 website.
To check compliance with IIST-SI-000238, complete the following steps for each site hosted on the IIS 10.0 web server:
  1. Open the IIS 10.0 Manager.
  2. Click the website name.
  3. Under
    IIS
    , double-click the
    Logging
     icon.
  4. In the
    Logging
     dialog, determine the
    Directory:
    that
    W3C
     logging is being written to.
  5. Confirm with your System Administrator that the designated log path is of sufficient size to maintain the logging.
  6. Under
    Log File Rollover
    , verify that
    Do not create new log files
     is not selected.
  7. Verify that a schedule is configured to roll over log files on a regular basis.
  8. Consult with your System Administrator to determine if there is a documented process for moving the log files off of the IIS 10.0 web server to another logging device.
If the designated logging path device is not of sufficient space to maintain all log files and there is not a schedule to rollover files on a regular basis, your application is not compliant.
If your application is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the site name.
  3. Under
    IIS
    , double-click the
    Logging
     icon.
  4. If necessary, in the
    Logging
     configuration box, designate a log path to a location able to house the logs.
  5. Under
    Log File Rollover
    , deselect the
    Do not create new log files
     setting.