Click Compliance Auditor on the home page of the console.
Select the record you want to view.
Click View Record in the task pane.
Record data for this event is shown, including the submit user and host, the run user and host, the command, whether it was authorized by Command Control, and whether the session was captured.
From here you can view a Command Control keystroke report, if it exists, or edit the record. If a keystroke report exists, you must review it before you can edit the record. See Viewing and Editing a Command Control Keystroke Report for more information.