Starting the session player separately

In most cases, you start the session player from Audit Analyzer. However, you can also start the session player from a Windows command prompt using standard Windows command line options or by specifying a Uniform Resource Identifier (URI).

Using Window command line options

If you use the Windows command line to start the session play, the installation name and session ID are required. The other arguments are optional.

daplayer /installation=installation_name /id=session_guid 

For example:

daplayer.exe /installation=MyInstallation 

If you don’t specify the audit server connection string, the session player attempts to bind to an appropriate audit management database. The session player can replay sessions from only one audit store, but the audit store ID is optional because sessions usually reside in a single audit store. An individual session can span multiple audit store databases within a single audit store. If a session spans multiple audit stores, that is, different subnets or sites, you should specify which audit store to play it from.

The timestamp option is a 32-bit integer that tells the session player to jump to the point where the event of interest occurred.

Using the Uniform Resource Identifier (URI)

The Uniform Resource Identifier identifies the session player, the installation name, and the session GUID for each session. This format is especially useful when used with the Copy Session URI menu item. The URI link can then be pasted into an email or instant messenger message. On a computer where Audit Analyzer is installed, the recipient can simply click on the URI link and the session player starts automatically.

Playing back a session from a web browser

On computers that have Audit Analyzer installed, you can also play back sessions from a web browser. Because the cda:// protocol is automatically registered on the computer with Audit Analyzer, you can use a web browser to replay a specific session. If you want to play back a session from a web browser, you can extract the installation and session identifier from the session URI.

To get the installation and session identifier:

  1. Select a session and right-click or open the session in the session player, then select File > Copy Session URI.
  2. Open a text editor and paste the session URI into the file.
  3. Delete the portion of the URI that identifies the player, so that only the installation and the object GUID remain.

    For example, if the URI looks like this:


    Remove the first part of the URI so that you only have the installation name and session identifier:


To play back a specific session from a web browser:

  1. Open a web browser.
  2. Type the installation name and session ID in the address bar of the web browser:

    For example:


    The session player opens and plays the specified session.