On 6/6/17 11:05 PM, Fen Labalme wrote:
While rsyslog is an option, we use filebeat with SSL/TLS. Many ways
to
manage as you say. Testing and validation methods need to support
tailoring.
IMHO it's scope creep to support every possible 3rd party solution.
OS-level config checks should be scoped to evaluated native OS-level
capabilities.
With that said, for things that are configured through 3rd party means,
how have you been getting by? Addendum to certification test plans?