Search in PAM recordings

Description

Soffid provides the functionality that allows searching for information about the PAM recording sessions.

First of all, to query the PAM recording, you could apply some filters to refine your search. Then, when you click the Search button, Soffid will show you all the recording sessions that comply with the criteria specified.

If you click on one record, Soffid will show you a new page with all the data about the session and the recorded video. If you query with a typed keys filter, a bookmark with the minute and second will show, and it will allow you to go directly to that point and view the action.

Screen overview

Related objects

• Network discovery : when the servers are discovered and created in Soffid
• Agents : each server will have its own agent
• Password vault :  account published in PAM
  
• PAM policies :  the PAM policies contains and configure the PAM rules
• PAM rules : PAM rules used in the PAM policies
• Search in PAM recordings : to search and watch recorded sessions
• Access logs : to search and watch recorded sessions
• Configure PAM session servers : where the PAM servers are configured

Standard attributes

Filter attributes

• Jum server group: used to connect to the system.
• URL: service URL.
• Typed keys: allows you to search in PAM recording.
  • Other information:
    • violation of rule
    • Ctrl
    • "[ctrl]+l"
    • "[ctrl]+d"
    • ...
• Screenshot contents by screen content
• User name: user who created the session.
• Start date: start date of the recording
• End  date: end date of the recording

Table attributes

• Jump server group: used to connect to the system.
• User name: user who created the session.
• Account name: account name of the user used to access to the system.
• URL: service URL
• Start date: start date on which the results are filtered
• End date: final day on which the results are filtered

Actions

Download CSV file	Allows you to download a CSV file with the PAM recording information.
Search	Allows you to query the PAM recording by applying some filters.
View recording	Allows you to view the recording. You need to click on the record of the PAM recording that you want to view, then Soffid will show you a new page with all the information about the session and the recording video.