CCE-19498-5| Platform: ms-sql2000 | Date: (C)2013-02-19 (M)2022-10-10 |
Error log retention should be configured appropriately.
Parameter:
(1) HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Microsoft SQL Server \ MSSQL.# \MSSQLServer \ NumErrorLogs
(2) HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Microsoft SQL Server \ Instance Names \ SQL\[instance name]
or
From the SQL Server Management Studio GUI:
1. Connect to and expand the SQL Server instance
2. Expand Management
3. Right-click on SQL Server Logs
4. Select Configure
5. Under the General Page, select or deselect Limit the number of error logs before they are
recycled
6. Enter the number of error log files determined for the SQL Server instance
7. Click OK
Technical Mechanism:
(1) number of error logs
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| DISA STIG SQL 2000 INS Version 8, Release 1.7 Benchmark Date: 27 August 2010 | Rule ID: V0015137 Rule Title: Error log retention shoud be set to meet log retention policy. STIG ID: DM3930 Severity: CAT II Class: Unclass |
