Video Capture for Windows monitors user activity by capturing videos of every task performed by the user.
You can browse the text log of a user and select a particular task and watch the video. This way you do not have to go through the entire video but watch the video of the specific user activity that you require.
You can search for a particular event in a video based on the keyword search option. For example, if an important file is deleted, then you can search for all the user activities where a deletion task is performed just by the keyword search, and then select the video of your interest.
You can schedule compression and archiving of video files to external storage.
You can turn the Video Capture feature ON or OFF for a particular user based on your requirement. This way you can manage your system’s storage capacity.
The video path is where all the recorded videos are stored. This feature creates the path by default. If you want to create a new video path:
Click
in the home page of the console.Select the host for which you want to configure the video path.
Click
> > .Add the new path to store the videos under
. Ensure that you have created the new folders before you change the path.You can also save the videos in a shared folder by adding the path under
in the following format:\\<ip address>\<sharedfolder>
If Audit Manager is in a non Windows environment, change the path accordingly.
NOTE:
Access credential drop down will contain only those credentials which are created in the Command Control under Privileged Accounts.
The access credential for the Windows shared folder must have write permission.
Click
.To simplify the search for a particular video, Video Capture for Windows has a set of preconfigured filters for any task performed by you, like type, click and so forth. To edit the filter settings:
Click
in the home page of the console.Click
.Edit the
.By default,
has the following filters:Type|click|Checked|Close window|Terminate|msc|user|group|start|stop|Log Off
Click Finish.
NOTE:After editing the filter configuration if you want the initial filter configuration then click
> .To archive the videos:
Click
in the home page of the console.Click
.Add the following sample script under
:use warnings; use File::Copy; if ($DBGRP eq 'cmdctrl') { my $srcdir = ($^O eq "MSWin32) ? "C:/Program Files/Novell/npum/service/local/audit/video/capture/" : "/opt/novell/npum/service/local/audit/video/capture/"; my $dest = ($^O eq "MSWin32) ? "C:/Program Files/Novell/npum/service/local/audit/videobck/":"/opt/novell/npum/service/local/audit/videobck/"; my $fileage = 1; #Age in days opendir(DIR, $srcdir) or die $ctx->log_error("Can't open $srcdir: $!"); my @files = grep {!/^\.+$/ } readdir(DIR); foreach my $file (@files) { my $old = "$srcdir/$file"; if( (-f $old) && ($fileage< -M $old) ) { move($old, $dest) or die $ctx->log_error("Move $old -> $dest failed: $!"); } } close(DIR); $ctx->log_info("Backup Complete"); }
Click
.To enable video capture:
Add an account domain. For more information, see Adding an Account Domain.
Click
on the home page of the console, then click .Select the LDAP account that you created from the
drop-down list.Only windows credentials are supported for enabling Video Capture for Windows
Select the following options:
Session Capture: Set this option to
to enable session captureVideo Capture: Set this option to
to enable video captureVideo Index: Set this option to
. You can navigate from one audit event to another within a video if the video index is set to . If you set this option to , then there is no mapping between the audit events and the video and you cannot navigate between audit events.Video fps: By default the value is set to 10. This option determines the quality of the video.
NOTE:
When Video Index is set to
, more hard disk memory is consumed.Increasing the Video fps value increases the consumption of hard disk memory.
Click
.To view the videos:
Click
on the home page of the console.Click
> .Select the session report you want to view, then click Keystroke Replay.
In the Command Control Keystroke Report page, click Playback
The Playback button is displayed only if video capture is enabled for that session.
In the Video playback screen, click the button to play the video.
Time: The time when the event occurred.
Standard Input: Action performed by the user.
All events: Displays all the events.
Filtered events: You can filter the events based on the predefined filter option. For more information, see Configuring the Video Report Filter Settings (Optional).
Find: Searches the events based on the options provided by you.