V-204726
Application Server Security Requirements Guide
Title
The application server must generate log records containing information that establishes the identity of any individual or process associated with the event.
Description
<VulnDiscussion>Information system logging capability is critical for accurate forensic analysis. Log record content that may be necessary to satisfy the requirement of this control includes: time stamps, source and destination addresses, user/process identifiers, event descriptions, success/fail indications, filenames involved, and access control or flow control rules invoked. Application servers have differing levels of logging capabilities that can be specified by setting a verbosity level....
Fix Text (Documentation Requirement)
Configure the application server logging system to log the identity of the user or process related to the events.