9.5 Video Capture

Video Capture monitors the user activity by capturing videos of every task performed by the user.

  • You can schedule compression and archiving of video files to external storage.

  • You can turn the Video Capture feature ON or OFF for a particular user based on your requirement. This way you can manage your system’s storage capacity.

  • For Windows session, you can browse the text log of a user and select a particular task and watch the video. This way you do not have to go through the entire video but watch the video of the specific user activity that you require.

  • For Windows session, you can search for a particular event in a video based on the keyword search option. For example, if an important file is deleted, then you can search for all the user activities where a deletion task is performed just by the keyword search, and then select the video of your interest.

9.5.1 Configuring Video Capture

Configuring the Video Path (Optional)

The video path is where all the recorded videos are stored. This feature creates the path by default.

NOTE:This video path configuration and audit settings are specific to respective hosts. To maintain consistency ensure that all the hosts with the Audit Manager package contains appropriate video configuration.

For example, if the Framework Manager has 2 hosts with Audit Manager package and one has the Video Subfolder Configuration enabled and other has the option disabled results in the videos being stored in different folder structure. To avoid this ensure that the video configuration is consistent across all the hosts.

To modify the video storage path:

  1. Click Hosts in the home page of the console.

  2. Select the host for which you want to configure the video path.

  3. Click Packages > Audit > Audit Settings.

  4. Specify the following:

    Video Path: Specify the path where the videos must be stored. Ensure that you have created the new folders before you change the path.

    Video Subfolder Configuration: Select Enable to store the videos in the sub folders created under the Video Path, that is, <Video Path>/<Host Name>/<Year>/<Month>/<Session ID>.

    Select Disable to store the videos directly in the path specified in Video Path.

    Shared Folder Access Credentials: You can also save the videos in a shared folder by adding the path under Shared Folder Access Credential in the following format:

    \\<ip address>\<sharedfolder>

    If Audit Manager is in a non Windows environment, change the path accordingly.

    NOTE:

    • Access credential drop down will contain only those credentials which are created in the Command Control under Privileged Accounts.

    • The access credential for the Windows shared folder must have write permission.

  5. Click Finish.

Configuring the Video Report Filter Settings (Optional)

To simplify the search of a particular video, Video Capture for Windows has a set of preconfigured filters for any task performed by you, like type, click and so forth.

NOTE:The Video Report filter is supported only for Windows sessions.

To edit the filter settings:

  1. Click Reporting in the home page of the console.

  2. Click Video Report Setting.

  3. Edit the Video Report Filter Settings.

    By default, Video Report Filter Settings has the following filters:

    Type|click|Checked|Close window|Terminate|msc|user|group|start|stop|Log Off
  4. Click Finish.

NOTE:After editing the filter configuration if you want the initial filter configuration then click Reset > Finish.

Configuring Video Archival (Optional)

To archive the videos:

  1. Click Reporting in the home page of the console.

  2. Click Audit Settings.

  3. Add the following sample script under Rollover Script:

    use warnings;
    use File::Copy; 
    
    
    if ($DBGRP eq 'cmdctrl') {
        my $srcdir = ($^O eq "MSWin32) ? "C:/Program
    Files/Netiq/npum/service/local/audit/video/capture/" : 
                                                          
    "/opt/netiq/npum/service/local/audit/video/capture/"; 
    
        my $dest = ($^O eq "MSWin32) ? "C:/Program
    Files/Netiq/npum/service/local/audit/videobck/":"/opt/netiq/npum/service/local/audit/videobck/";
    
        my $fileage = 1;     #Age in days 
    
    
    
        opendir(DIR, $srcdir) or die $ctx->log_error("Can't open $srcdir: $!");
        my @files = grep {!/^\.+$/ } readdir(DIR);
        foreach my $file (@files) {
            my $old = "$srcdir/$file";
            if( (-f $old) && ($fileage< -M $old) ) {
                move($old, $dest) or die $ctx->log_error("Move $old -> $dest
    failed: $!");
            }
        }  
        close(DIR);
        $ctx->log_info("Backup Complete");
    }
  4. Click Finish.

Configuring the Video Conversion Settings

Using this video conversion settings, you can optimize the videos conversion process based on quality, size and CPU utilization.

The video conversion settings is a global settings that will be applied to all the policies which have the Video Capture option enabled. Based on this configuration, the images are captured for the sessions and converted to videos.

To edit the Video Conversion Settings:

  1. On the home page of the console, click Command Control.

  2. In the left pane, click Command Control.

  3. In the right pane, click Video Settings.

  4. In the right pane, edit the following fields for Windows and SSH:

    Settings: Select Default or Low Priority to use the predefined settings, you cannot modify the predefined settings.

    Select Customize to customize the video settings.

    Video fps: This option determines the quality of the video. The Video fps value that is set is the maximum video fps that can be achieved. Based on the factors such as type of Processor, RAM capacity, CPU availability, and so on, the video fps may vary.

    If video fps value is high, the video quality is good and consumes more storage.

    Video Duration: Select the Video duration as 1min or 2 min based on the requirement.

    If video duration is more, number of video files are less.

    Video Conversion Priority: This option determines the video conversion process priority in CPU. By setting the priority, you can ensure that other operations of the CPU are uninterrupted.

    Set this option to Low when video conversion is not of high priority.

    Set this option to Normal when video conversion process is of moderate or high priority.

  5. Click Save.

Enabling Video Capture

To enable video capture:

  1. Add an account domain. For more information, see Adding an Account Domain.

  2. Click Command Control on the home page of the console, then click Create a rule.

  3. Select the account that you created from the Credentials drop-down list.

  4. Select the following options:

    For Windows:

    Session Capture: Set this option to ON to enable session capture

    Video Capture: Set this option to ON to enable video capture

    For SSH:

    Session Capture: Set this option to ON to enable session capture.

    X11 Enable: Set this option to Yes to enable X11 application access.

    Video Capture: Set this option to ON to enable video capture.

  5. Click Finish.

Converting the FLV Videos to WebM

If you have upgraded to Privileged Account Manager 3.2 from previous versions, you need to convert the recorded videos with .flv extension to .webm. This will enable playback of the recorded videos.

Convert the FLV Videos to WebM in Windows

To convert the videos to WebM format, download the FFmpeg executable from the download site and execute the following command:

ffmpeg.exe -i <input_file_name>.flv -c:v libvpx-vp9 -speed 8 -deadline realtime <output_file_name>.webm

Convert the FLV Videos to WebM in Linux/Unix

To convert the videos to WebM format, download the FFmpeg executable from the download site and execute the following command:

./ffmpeg -i <input_file_name>.flv -c:v libvpx-vp9 -speed 8 -deadline realtime <output_file_name>.webm

9.5.2 Viewing the Videos

To view the videos:

  1. Click Reporting on the home page of the console.

  2. Click Command Control > Sample Report.

  3. Select the session report you want to view, then click Keystroke Replay.

  4. In the Command Control Keystroke Report page, click Playback.

    The Playback button is displayed only if video capture is enabled for that session.

    NOTE:

    • If the recorded videos with .flv extension are not displayed, ensure that you have converted those videos to .webm format. For more information, refer to Converting the FLV Videos to WebM.

    • Video playback is not supported in Edge Browser as Edge browser does not support WebM format. Instead use Google Chrome or Mozilla Firefox to play the videos.

  5. In the Video playback screen, click the button to play the video.

    Time: The time when the event occurred.

    Standard Input: Action performed by the user.

    All events: Displays all the events.

    Filtered events: You can filter the events based on the predefined filter option. For more information, see Configuring the Video Report Filter Settings (Optional).

    Find: Searches the events based on the options provided by you.