For Windows computers, the video record captures desktop activity when users select roles with auditing enabled.
For UNIX sessions, the video record captures complete input and output typed in a UNIX shell during a session.
If the Replay option is available for a session on the right‑click menu, you can view a summary of the commands executed or applications opened in the session player. You can also search for commands, parameters, or events, control the playback speed and magnification from the session player, and update the session review status.
To play back a session when video capture auditing is enabled:
- Open Audit Analyzer and navigate to the session.
- Select the session in the right pane, right-click, then select Replay to open the session player.
The left pane of the session player displays a summary of activity similar to the indexed list. For example, if the session is a Windows session:
You can search on any column to find events of interest. If the session is a UNIX session, you can search the full session for any text string. For example, if you are playing a UNIX session, the right pane displays the shell session and a search field.
- Click the Play/Pause icon at the bottom of the session player to start or stop the session you are viewing.
You can also fast forward session playback by clicking the Speed control icon to play back at 2x or 3x the normal speed. The dark blue playback line across the bottom of the window represents the total time of the session. You can drag the Timepoint needle to go directly to a specific point in the session.
The Real-time icon toggles to allow you to play back a session as it was recorded in real time or move swiftly from one user action to the next. The Session point in the lower right corner identifies the date and time of the current point in the session playback.
- To update the session review status:
- Select Session > Update Review Status, and then select the desired review status.
Add your review comments and click OK.
The updated session review status displays in the session player.
- Close the session player.