Each O&M operation in Bastionhost generates a session that records the operation. On the Real-Time Monitoring page, auditors can search active sessions by host IP address, username, or session ID, view session details to identify suspicious activity, and play session videos for real-time inspection.
Prerequisites
Before you begin, ensure that you have:
Flash Player installed in your browser (required to play session videos)
Navigate to Real-Time Monitoring
All tasks in this document start from the Real-Time Monitoring page:
Log on to the Bastionhost console. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the bastion host you want to manage and click Manage.
In the left-side navigation pane, choose O&M Audit > Real-Time Monitoring.
Search for sessions
On the Real-Time Monitoring page, specify one or more search conditions, such as Host IP Address, User, or Session ID, and click Search.
To reuse a set of search conditions, click Save to save them as a filter template. The next time you search, select the saved template from the Default Condition drop-down list in the upper-right corner of the session list.
View session details
In the session list, find the session you want to inspect and click Details in the Actions column.
Play a session video
In the session list, find the session whose video you want to watch and click Play in the Actions column.