Video Capture monitors the user activity by capturing videos of every task performed by the user.
You can schedule compression and archiving of video files to external storage.
You can turn the Video Capture feature ON or OFF for a particular user based on your requirement. This way you can manage your system’s storage capacity.
You can off-load the session screen to video conversion operation to a dedicated video off-load agent. This way you can improve the agent performance.
For Windows session, you can browse the text log of a user and select a particular task and watch the video. This way you do not have to go through the entire video but watch the video of the specific user activity that you require.
For Windows session, you can search for a particular event in a video based on the keyword search option. For example, if an important file is deleted, then you can search for all the user activities where a deletion task is performed just by the keyword search, and then select the video of your interest.
The video path is where all the recorded videos are stored. This feature creates the path by default.
NOTE:This video path configuration and audit settings are specific to respective hosts. To maintain consistency ensure that all the hosts with the Audit Manager package contains appropriate video configuration.
For example, if the Framework Manager has 2 hosts with Audit Manager package and one has the Video Subfolder Configuration enabled and other has the option disabled results in the videos being stored in different folder structure. To avoid this ensure that the video configuration is consistent across all the hosts.
To modify the video storage path:
Click Hosts in the home page of the console.
Select the host for which you want to configure the video path.
Click Packages > Audit > Audit Settings.
Specify the following:
Video Path: Specify the path where the videos must be stored. Ensure that you have created the new folders before you change the path. If you want to store the video in a shared folder, you must specify the video path in the format:
\\<ip address>\<sharedfolder>
Video Subfolder Configuration: Select Enable to store the videos in the sub folders created under the Video Path, that is, <Video Path>/<Host Name>/<Year>/<Month>/<Session ID>.
Select Disable to store the videos directly in the path specified in Video Path.
Shared Folder Access Domain: If you want to store the video in a shared folder, select the domain on which the shared folder is located.
Shared Folder Access Credentials: If you want to store the video in a shared folder, select the credentials to access the shared folder.
If Audit Manager is in a non Windows environment, change the path accordingly.
NOTE:
Access credential drop down will contain only those credentials which are created in the Command Control under Privileged Accounts.
The access credential for the Windows shared folder must have write permission.
Click Finish.
To simplify the search of a particular video, Video Capture for Windows has a set of preconfigured filters for any task performed by you, like type, click and so forth.
NOTE:The Video Report filter is supported only for Windows sessions.
To edit the filter settings:
Click Reports in the home page of the console.
Click Video Report Setting.
Edit the Video Report Filter Settings.
By default, Video Report Filter Settings has the following filters:
Type|click|Checked|Close window|Terminate|msc|user|group|start|stop|Log Off
Click Finish.
NOTE:After editing the filter configuration if you want the initial filter configuration then click Reset > Finish.
To archive the videos:
Click Reports in the home page of the console.
Click Audit Settings.
Add the following sample script under Rollover Script:
\nuse warnings;\nuse File::Copy; \n $ctx->log_info(\"===================================================================================\");\nif ($DBGRP eq \'cmdctrl\') {\n my $srcdir = ($^O eq \'MSWin32\') ? \"C:/Program Files/Netiq/npum/service/local/audit/video/capture/\" : \"/opt/netiq/npum/service/local/audit/video/capture/\"; \n\n my $dest = ($^O eq \'MSWin32\') ? \"C:/Program Files/Netiq/npum/service/local/audit/videobck/\" : \"/opt/netiq/npum/service/local/audit/videobck/\";\n\n my $fileage = 1; #Age in days \n\n opendir(DIR, $srcdir) or die $ctx->log_error(\"Can\'t open $srcdir: $!\");\n my @files = grep {!/^\\. $/ } readdir(DIR);\n foreach my $file (@files) {\n my $old = \"$srcdir/$file\";\n if( (-f $old) && ($fileage< -M $old) ) {\n unlink glob \"\'/opt/netiq/npum/service/local/audit/videobck/*.*\'\";\n \n move($old, $dest) or die $ctx->log_error(\"Move $old -> $dest failed: $!\");\n \n }\n } \n close(DIR);\n $ctx->log_info(\"Backup Complete\");\n}Click Finish.
Using this video conversion settings, you can optimize the videos conversion process based on quality, size and CPU utilization.
The video conversion settings is a global settings that will be applied to all the policies which have the Video Capture option enabled. Based on this configuration, the images are captured for the sessions and converted to videos.
To edit the Video Conversion Settings:
On the home page of the console, click Command Control.
In the left pane, click Command Control.
In the right pane, click Video Settings.
In the right pane, edit the following fields for Windows and SSH:
Settings: Select Default or Low Priority to use the predefined settings, you cannot modify the predefined settings.
Select Customize to customize the video settings.
Video fps: This option determines the quality of the video. The Video fps value that is set is the maximum video fps that can be achieved. Based on the factors such as type of Processor, RAM capacity, CPU availability, and so on, the video fps may vary.
If video fps value is high, the video quality is good and consumes more storage.
Video Duration: Select the Video duration as 1 min or 2 min based on the requirement.
If video duration is more, number of video files are less.
Video Conversion Priority: This option determines the video conversion process priority in CPU. By setting the priority, you can ensure that other operations of the CPU are uninterrupted.
Set this option to Low when video conversion is not of high priority.
Set this option to Normal when video conversion process is of moderate or high priority.
Click Save.
To enable video capture:
Add an resource. For more information, see Contextual Help.
Click Command Control on the home page of the console, then click Create a rule.
Select the account that you created from the Credentials drop-down list.
Select the following options:
For Windows:
Session Capture: Set this option to ON to enable session capture
Video Capture: Set this option to ON to enable video capture
For SSH:
Session Capture: Set this option to ON to enable session capture.
X11 Enable: Set this option to Yes to enable X11 application access.
Video Capture: Set this option to ON to enable video capture.
Click Finish.
Privileged Account Manager supports videos only in WebM format. If you have videos in FLV format, you need to convert the videos to WebM format to enable playback of the recorded videos.
Convert the FLV Videos to WebM in Windows
To convert the videos to WebM format, download the FFmpeg executable from the download site and execute the following command:
ffmpeg.exe -i <input_file_name>.flv -c:v libvpx-vp9 -speed 8 -deadline realtime <output_file_name>.webm
Convert the FLV Videos to WebM in Linux/Unix
To convert the videos to WebM format, download the FFmpeg executable from the download site and execute the following command:
./ffmpeg -i <input_file_name>.flv -c:v libvpx-vp9 -speed 8 -deadline realtime <output_file_name>.webm