When a user logs on to a bastion host to perform O&M operations on assets, you can view the O&M session details in the Bastionhost console in real time as an administrator. The O&M session details are displayed on the Graphic Text, Commands, and File Transfer tabs. You can interrupt the sessions with unauthorized or high-risk operations. This topic describes how to monitor O&M sessions in real time and interrupt high-risk sessions as an administrator.
Procedure
Log on to the Bastionhost console by using your Alibaba Cloud account. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, choose .
On the Real-Time Monitoring page, specify search conditions and click Search.
Find the session that you want to monitor and click Play in the Actions column.
If you find that the user is performing unauthorized or high-risk operations, return to the session list, select the session, and then click Interrupt Sessions below the list.
In the dialog box that appears, click Interrupt Session.
References
For information about O&M audit types, audit content, and retention period of audit videos, see O&M audit.
For information about how to view the O&M information and export O&M reports, see View the O&M information on the O&M Reports page and export an O&M report.