6.5 Video Capture for Windows

Video Capture for Windows monitors user activity by capturing videos of every task performed by the user.

6.5.1 Configuring Video Capture for Windows

Configuring the Video Path (Optional)

The video path is where all the recorded videos are stored. This feature creates the path by default. If you want to create a new video path:

  1. Click Hosts in the home page of the console.

  2. Select the host for which you want to configure the video path.

  3. Click Packages > Audit > Audit Settings.

  4. Add the new path to store the videos under Video path. Ensure that you have created the new folders before you change the path.

    You can also save the videos in a shared folder by adding the path under Shared Folder Access Credential in the following format:

    \\<ip address>\<sharedfolder>
    

    If Audit Manager is in a non Windows environment, change the path accordingly.

    NOTE:

    • Access credential drop down will contain only those credentials which are created in the Command Control under Privileged Accounts.

    • The access credential for the Windows shared folder must have write permission.

  5. Click Finish.

Configuring the Video Report Filter Settings (Optional)

To simplify the search for a particular video, Video Capture for Windows has a set of preconfigured filters for any task performed by you, like type, click and so forth. To edit the filter settings:

  1. Click Reporting in the home page of the console.

  2. Click Video Report Setting.

  3. Edit the Video Report Filter Settings.

    By default, Video Report Filter Settings has the following filters:

    Type|click|Checked|Close window|Terminate|msc|user|group|start|stop|Log Off
    
  4. Click Finish.

NOTE:After editing the filter configuration if you want the initial filter configuration then click Reset > Finish.

Configuring Video Archival (Optional)

To archive the videos:

  1. Click Reporting in the home page of the console.

  2. Click Audit Settings.

  3. Add the following sample script under Rollover Script:

    use warnings;
    use File::Copy; 
    
    
    if ($DBGRP eq 'cmdctrl') {
        my $srcdir = ($^O eq "MSWin32) ? "C:/Program
    Files/Novell/npum/service/local/audit/video/capture/" : 
                                                          
    "/opt/novell/npum/service/local/audit/video/capture/"; 
    
        my $dest = ($^O eq "MSWin32) ? "C:/Program
    Files/Novell/npum/service/local/audit/videobck/":"/opt/novell/npum/service/local/audit/videobck/";
    
        my $fileage = 1;     #Age in days 
    
    
    
        opendir(DIR, $srcdir) or die $ctx->log_error("Can't open $srcdir: $!");
        my @files = grep {!/^\.+$/ } readdir(DIR);
        foreach my $file (@files) {
            my $old = "$srcdir/$file";
            if( (-f $old) && ($fileage< -M $old) ) {
                move($old, $dest) or die $ctx->log_error("Move $old -> $dest
    failed: $!");
            }
        }  
        close(DIR);
        $ctx->log_info("Backup Complete");
    }
    
  4. Click Finish.

Enabling Video Capture for Windows

To enable video capture:

  1. Add an account domain. For more information, see Adding an Account Domain.

  2. Click Command Control on the home page of the console, then click Create a rule.

  3. Select the LDAP account that you created from the Credentials drop-down list.

    Only windows credentials are supported for enabling Video Capture for Windows

  4. Select the following options:

    Session Capture: Set this option to ON to enable session capture

    Video Capture: Set this option to ON to enable video capture

    Video Index: Set this option to Yes. You can navigate from one audit event to another within a video if the video index is set to Yes. If you set this option to NO, then there is no mapping between the audit events and the video and you cannot navigate between audit events.

    Video fps: By default the value is set to 10. This option determines the quality of the video.

    NOTE:

    • When Video Index is set to Yes, more hard disk memory is consumed.

    • Increasing the Video fps value increases the consumption of hard disk memory.

  5. Click Finish.

6.5.2 Viewing the Videos

To view the videos:

  1. Click Reporting on the home page of the console.

  2. Click Command Control > Sample Report.

  3. Select the session report you want to view, then click Keystroke Replay.

  4. In the Command Control Keystroke Report page, click Playback

    The Playback button is displayed only if video capture is enabled for that session.

  5. In the Video playback screen, click the button to play the video.

    Time: The time when the event occurred.

    Standard Input: Action performed by the user.

    All events: Displays all the events.

    Filtered events: You can filter the events based on the predefined filter option. For more information, see Configuring the Video Report Filter Settings (Optional).

    Find: Searches the events based on the options provided by you.