Skip to content

6.1.3.2 Ensure rsyslog service is enabled and active

Audit#

- IF - rsyslog is being used for logging on the system: Run the following command to verify rsyslog.service is enabled: 

# systemctl is-enabled rsyslog
enabled

Run the following command to verify rsyslog.service is active: 

# systemctl is-active rsyslog.service
active

Remediation#

- IF - rsyslog is being used for logging on the system: Run the following commands to unmask, enable, and start rsyslog.service: 

# systemctl unmask rsyslog.service
# systemctl enable rsyslog.service
# systemctl start rsyslog.service