Rule version TSS0-OS-000470 · STIG v9 · 2026-09-01
The task of allocating audit record storage capacity is usually performed during initial installation of the operating system.
Ask the system administrator for the procedure to offload SMF files to a different system or media than the system being audited.
If the procedure does not exist, this is a finding.
Develop a procedure to offload SMF files to a different system or media than the system being audited.