The User Activity Recording Parameters (for Linux Clients)
NOTE: Similar parameters are also available for Windows Clients and macOS Clients.
The system records the activity of users on Client computers. Screen captures, and associated metadata such as an active window title, URL, text data, etc. are the main results of Linux Client monitoring.
The following user activity recording parameters can be configured on a Linux Client (or Client group) by selecting the options (on the Editing Client / Editing Client Group page, on the User Activity Recording tab), to define when user activity is recorded on the Client computer(s):
• In the Activity Recording Configuration section:
- Recording Mode: This option is only currently supported on Windows Clients.
- Record user activity periodically: If this checkbox is selected, user activity will only be recorded at the Period (sec) frequency specified, irrespective of whether anything changes on the screen of users or not (where the default value is 30 seconds, and the minimum frequency which can be defined is 1 second).
- Record user activity at a defined frame rate: This option is only currently supported on Windows Clients.
- Record user activity by event:
- Record user activity on active window switching: If this checkbox is selected, user activity will be recorded on changing of the active window, e.g. a new window is opened (i.e. an application starts up), a new browser tab is opened, any secondary window is opened, etc (where the activity will be recorded even if the active window is changed by using the keyboard).
- Check changing of window titles: If this checkbox is selected, user activity will be recorded on changing of the name of the active window (where the activity will be recorded even if the active window title is changed by using the keyboard).
- Record user activity on clicking and key pressing: If this checkbox is selected, user activity will be recorded on each mouse click and each press of a key on the keyboard (by default, in this mode, recorded user activity data is sent every second).
- Record user activity on entering command in terminal: If this checkbox is selected, user activity will be recorded every time a command is entered into the terminal. If this option is enabled, the function calls are recorded.
• In the Recording Period Settings section:
- Record user activity only on alert or USB monitoring rule triggering: If this checkbox is selected, user activity will only be recorded when alerts rules are triggered, with how long before and after each alert event will be recorded specified as follows:
- Minutes before triggering: Max = “60” minutes; Min = “1” minute (where the default value = "4" minutes).
- Minutes after triggering: Max = “60” minutes; Min = “1” minute; “0” = from when the alert rule is triggered until the end of the session (where the default value = "4" minutes).
• In the Screen Capture Settings section:
- NOT AVAILABLE IN SAAS Enable screen capture recording along with user activity recording: If this checkbox is selected, screen captures will be recorded. If this checkbox is not selected for the Client, only the metadata (active window title, URL, text data, etc.) will be monitored and recorded.
- Capture active window only: By default, screen captures of the whole screen will be recorded. If this checkbox is selected, only the current active window will be displayed on screen captures.
- NOT AVAILABLE IN SAAS Bit depth: By default, screen captures are recorded in grayscale with 4-bit color depth. This is the optimal value, to ensure reasonable resolution of the screen captures, while not increasing the amount of data stored too much. Alternatively, a color depth of 8 bits or 24 bits can be selected.
