Analysis, viewing, and indexing functions, services, and applications used as part of the Central Log Server must be configured to comply with DoW-trusted path and access requirements.

Analysis, viewing, and indexing functions, services, and applications, such as analysis tools and other vendor-provided applications, must be secured. Software used to perform additional functions, which resides on the server, must also be secured or could provide a vector for unauthorized access to the events repository.

Examine the configuration.

Verify analysis, viewing, and indexing functions, services, and applications used with the Central Log Server are configured to comply with DoW-trusted path and access requirements.

If analysis, viewing, and indexing functions, services, and applications used with the Central Log Server are not configured to comply with DoW-trusted path and access requirements, this is a finding.

Configure all analysis, viewing, and indexing functions, services, and applications used with the Central Log Server to comply with DoW-trusted path and access requirements.