Each time users perform O&M operations in Bastionhost, a session is generated to record the O&M operations. Auditors can monitor the session in real time to check whether any unauthorized operation is performed.

Prerequisites

Flash Player is installed on your browser to play session videos.

Search for sessions

  1. Log on to the Bastionhost system. For more information, see Log on to Bastionhost.
  2. In the left-side navigation pane, click Audit > Real-Time Monitoring.
  3. On the Real-Time Monitoring page that appears, configure search conditions.
    Search for real-time monitoring sessions

    The following table describes the search conditions that you can configure.

    Search condition Description
    Protocol Select a protocol type from the Protocol drop-down list. Valid values: All, SSH, SFTP, and RDP.
    Host IP Address Enter the IP address of the target host in the session you want to view.
    Hostname Enter the name of the target host in the session you want to view.
    User Enter the name of the user whose session you want to view.
    Logon Name Enter the name of the account used by the user to log on to the target host.
    Source IP Address Enter the IP address used by the user to perform O&M operations.
    Session ID Enter the session ID.
  4. Optional:Click Save. In the Save dialog box that appears, specify Filter Template and click OK to save the search conditions.
    Note After you save the search conditions as a template, you can acquire the same conditions again by selecting the template name from the Default Condition drop-down list in the upper-right corner of the session search result list.
  5. Click Search.

View session details

  1. Log on to the Bastionhost system. For more information, see Log on to Bastionhost.
  2. In the left-side navigation pane, click Audit > Real-Time Monitoring.
  3. On the Real-Time Monitoring page that appears, find the target session and click Details in the Actions column.
    View session details

    In the Session Details pane that appears, you can view basic information about the session, user, and host.

Play session videos

  1. Log on to the Bastionhost system. For more information, see Log on to Bastionhost.
  2. In the left-side navigation pane, click Audit > Real-Time Monitoring.
  3. On the Real-Time Monitoring page that appears, find the target session and click Play in the Actions column to watch the session video.Play session videos