Description

Ensure that a logging system is active and in use.

systemctl is-active rsyslog systemd-journald

The command should return at least one active.

Rationale

The system should have one active logging service to avoid conflicts and ensure consistency.

Warning

This rule does not come with a remediation. There are specific rules for enabling each logging service which should be enabled instead.