The Cassandra Server must generate time stamps, for audit records and application data, with a minimum granularity of one second.
From vRealize - Cassandra Security Technical Implementation Guide
Part of SRG-APP-000375-DB-000323
Associated with:
CCI-001889
SV-87309r1_rule
The Cassandra Server must generate time stamps, for audit records and application data, with a minimum granularity of one second.
Vulnerability discussion
Without sufficient granularity of time stamps, it is not possible to adequately determine the chronological order of records. Time stamps generated by the DBMS must include date and time. Granularity of time measurements refers to the precision available in time stamp values. Granularity coarser than one second is not sufficient for audit trail purposes. Time stamp values are typically presented with three or more decimal places of seconds; however, the actual granularity may be coarser than the apparent precision. For example, SQL Server's GETDATE()/CURRENT_TMESTAMP values are presented to three decimal places, but the granularity is not one millisecond: it is about 1/300 of a second.Some DBMS products offer a data type called TIMESTAMP that is not a representation of date and time. Rather, it is a database state counter and does not correspond to calendar and clock time. This requirement does not refer to that meaning of TIMESTAMP.
Check content
Review the Cassandra Server settings to ensure time stamps, for audit records and application data, with a minimum granularity of one second are generated.
Navigate to and open /usr/lib/vmware-vcops/user/conf/cassandra/logback.xml.
Navigate to the node with the name="FILE" attribute.
Navigate to node.
If the node does not look like the expected result, this is a finding.
Expected result:
%-5level [%thread] %date{ISO8601, UTC} %F:%L - %msg%n
Fix text
Configure the Cassandra Server to generate time stamps, for audit records and application data, with a minimum granularity of one second.
Navigate to and open /usr/lib/vmware-vcops/user/conf/cassandra/logback.xml.
Navigate to the node with the name="FILE" attribute.
Navigate to node.
Edit the to look like the below.
%-5level [%thread] %date{ISO8601, UTC} %F:%L - %msg%n
Pro Tips
Lavender hyperlinks in small type off to the right (of CSS
class id, if you view the page source) point to
globally unique URIs for each document and item. Copy the
link location and paste anywhere you need to talk
unambiguously about these things.
You can obtain data about documents and items in other
formats. Simply provide an HTTP header Accept:
text/turtle or
Accept: application/rdf+xml.
Powered by sagemincer