Updated on 2024-09-24 GMT+08:00

Viewing History Sessions

After an operation is finished, the audit administrator will receive a history session record as well. The audit administrator can query operation record details and audit historical sessions online.

Constraints

  • Text and video audit are available for operations performed through a web browser.
  • For O&M operations, file transfer, and database operations through an SSH client, video audit is unavailable.
  • Details about account verification for accessing managed resources will not be recorded.
  • Only valid session logs can be played. Valid session logs start when you initiate a session and end when the last operation is completed.

Prerequisites

  • You have the management permissions for the History Session module.
  • The OM session has finished.

Viewing History Sessions

  1. Log in to your bastion host.
  2. Choose Audit > History Session.

    Figure 1 History Session

    The More operation in the Details column is removed from version 3.3.42.0 or later versions.

  3. Query history sessions.

    • Quick search

      Enter a keyword in the search box to quickly query history sessions by resource name, account, user, or source IP.

    • Advanced search

      Enter keywords in the corresponding attribute search boxes to search for history sessions in exact mode.

  4. Click Detail in the Operation column of the history session you want to view.

    Figure 2 Viewing History Sessions

  5. View resource session information, system session information, operation records, file transmission records, and collaborative session records.

    For a history session, you can view the resource name, type, host IP address, account, start and end time, session duration, session size, operation user, source IP address and MAC address of the operation user, login mode, operation records, file transfer records, and session collaboration records.

Online Playback of History Session

The total duration and playable duration of a downloaded video file may be different because the logout time and last operation time are different.

  • The total duration starts from the time when a system user logs in to a resource to the time they log out of the resource.
  • The playable duration starts from the time a system user logs in to a resource to the time the last session is complete.
  1. Log in to your bastion host.
  2. Choose Audit > History Session.

    Figure 3 History Session

    The More operation in the Details column is removed from version 3.3.42.0 or later versions.

  3. Click Play in the Operation column of the historical session you want to audit.

    Figure 4 History session video playback

  4. Play the video recording the entire session operation process.

    • In the session window, check the total duration and drag the playback progress bar as needed.
    • In the right pane of the session window, you can view information such as operation instructions, file transfer records, participants of the session, and join a live session to monitor the participants.

  5. Skip idle playback.

    • If Skip Idle is enabled, only the content containing the session operations is played.
    • This function is disabled by default.

  6. Control playback speed as needed.

    Click 1X and select a playback speed. You can select 1X, 2X, 4X, 8X, or 16X.

  7. Take a quick screenshot of the session.

    Click to generate a screenshot in .png format.

  8. Query the playlist.

    1. Click to expand the playlist on the right of the session window. Then you can select a history session to play its video.
    2. Enter a login name or account name in the search box to search for a historical session.
    3. Click the target session to play its video immediately.
    Figure 5 History session playback list