Each time an O&M operation is performed in Bastionhost, a session is generated. After the session ends, a record is generated for the session of the O&M operation. Auditors can audit the session to check whether an unauthorized operation is performed.
Log on to the Bastionhost console. In the top navigation bar, select the region in which your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, choose .
Click a tab based on the type of the session that you want to manage.
Graphic Text: You can query the sessions of O&M operations that are performed on servers by using your bastion host in Remote Desktop Protocol (RDP) mode. You can query the sessions of O&M operations only on servers that run Windows Server 2008 or earlier versions.
NoteIf you select Keylogger when you configure RDP Options for a control policy, the keyboard operations that are performed during RDP-based O&M are displayed in the session list. For more information, see Configure a control policy.
Commands: You can query the commands that are used to perform O&M operations on servers by using your bastion host in SSH mode.
File Transfer: You can query the sessions of O&M operations, such as file upload, file deletion, and file renaming, that are performed on servers by using your bastion host.
Database Audit: You can query the SQL statements that are used in the O&M operations on databases by using your bastion host and the execution results.
Log Backup: You can use your bastion host to manage O&M logs. For more information, see Use the log backup feature.
Configure the search conditions and click Search.
You can configure search conditions based on search items, such as host IP addresses, usernames of sessions, and session IDs.
You can also click Save in the Filters section to save the search conditions. In the Save dialog box, specify the Filter Template parameter and click OK. After you save the search conditions as a template, you can select the template name from the Default Condition drop-down list in the upper-right corner of the session list. This way, the saved search conditions are applied.
In the session list, find the session that you want to manage. In the Actions column, you can click the corresponding option to play the session video or view the session details.
To play the session video, click Play.
NoteYou can view the EXEC commands used to perform O&M operations on the Commands tab. You cannot view the commands by playing session videos.
To view the session details, click Details. In the Session Details panel, view the basic information about the session, user, and host.