Rule ID
SV-257783r991562_rule
Version
V2R8
CCIs
In the event of a system failure, RHEL 9 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.
Verify that "systemd-journald" is active with the following command: $ systemctl is-active systemd-journald active If the systemd-journald service is not active, this is a finding.
To enable the systemd-journald service, run the following command: $ sudo systemctl enable --now systemd-journald