RHEL 10 must have the rsyslog service set to active.

The rsyslog service must be running to provide logging services, which are essential to system administration.

Verify RHEL 10 rsyslog is active with the following command:

$ systemctl is-active rsyslog active

If the rsyslog service is not active, this is a finding.

Configure RHEL 10 to enable the rsyslog service with the following command:

$ sudo systemctl enable --now rsyslog