The container platform audit records must have a date and time association with all events.

Within the container platform, audit data can be generated from any of the deployed container platform components. This audit data is important when there are issues, such as security incidents, that must be investigated. To make the audit data worthwhile for the investigation of events, it is necessary to know when the event occurred. To establish the time of the event, the audit record must contain the date and time.

Review the container platform configuration for audit events date and time.

Ensure audit policy for event date and time are enabled.

Verify records showing event date and time are included in the log.

Validate system documentation is current.

If the date and time are not included, this is a finding.

Configure the container platform to include log date and time with the event. Revise all applicable system documentation.