Help Center> Cloud Bastion Host> Getting Started> Step 6: Audit O&M Sessions

Step 6: Audit O&M Sessions

Background

Users can log in to the managed resources, including databases, within the granted permissions through the CBH system for further O&M.

The CBH system makes it easier for the administrator users to audit logins, operations on managed resources, and O&M sessions performed by other O&M users.

Procedure

Table 1 Description about the System and Audit modules

Audit Object

Audit Content

Live Session

Monitor on-going O&M sessions, view the session details of O&M users and resources, and interrupt sessions with high risks.

History Session

  • O&M session videos: The entire process of O&M sessions is automatically recorded by screencasting. You can play or download the screencasts online.
  • O&M session details: O&M session details generated for different users can be viewed online or exported in an Excel file. Session details include detailed operation records of resource sessions, system sessions, O&M records, file transfer, and collaboration sessions.

Ops Report

Display the trend of O&M operations over time in a line chart and generate a comprehensive O&M analysis report.

This area includes O&M time distribution, resource access times, session duration, number of access times from source IP addresses, session collaboration, two-person authorization, command interception, number of character commands, and number of transferred files.

System Log

  • System login logs: record detailed information about user login to the system. System login logs can be viewed online or exported to Excel files.
  • System operation logs: record detailed system operations. System operation logs can be viewed online or exported to an Excel file.

System Report

Collect statistics on user logins and system operations in a bar chart and generate a comprehensive system management analysis report.

This area includes information about user control, user and resource operations, number of user source IP addresses, user login mode, abnormal login, session control, and user status.