Skip Navigation

IIST-SV-000145: Allocate sufficient log record storage capacity

The IIS 10.0 web server must use a logging mechanism configured to allocate log record storage capacity large enough to accommodate the logging requirements of the IIS 10.0 web server.
To check compliance with IIST-SV-000145, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Under
    IIS
    , double-click the
    Logging
    icon.
  4. In the
    Logging
    dialog, verify the
    Directory:
    that W3C logging is written to.
  5. Confirm with the System Administrator that the designated log path is of sufficient size to maintain the logging.
  6. Under
    Log File Rollover
    , verify that
    Do not create new log files
    is not selected.
  7. Verify that a schedule is configured to roll over log files on a regular basis.
  8. Verify with the System Administrator that there is a documented process for moving the log files off of the IIS 10.0 web server to another logging device.
If the designated logging path device is not large enough to maintain all log files, and there is not a schedule to roll over files on a regular basis, your server is not compliant.
If your server is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Under
    IIS
    , double-click the
    Logging
    icon.
  4. In the
    Logging
    dialog, designate a log path to a location able to house the logs.
  5. Under
    Log File Rollover
    , deselect the
    Do not create new log files
    option.
  6. Configure a schedule to roll over log files on a regular basis.