Auditing ObserveIT

ITM On-Prem (ObserveIT) has an internal auditing system. Each time a video is accessed, a log is created of the user name, IP address, the captured session, and the frames that were viewed. This log provides auditing of the administrators who accessed the Web Console, and prevents the need for an external audit mechanism. The audit trail cannot be deleted, which means that each access to the Web Console will always be visible in the audit log.

You can also generate reports to provide summary information about user logins, sessions, and saved sessions in which console users were active. For further details, see Configuring ITM On-Prem (ObserveIT) Reports.

To view the audit log for the Web Console

• Navigate to Configuration > Security & Privacy > Audit.

  The Audit page opens, where you can view audit log information in the following tabs:

  • Logins: displays details about all successful and failed logins to the Web Console.

  • Sessions: provides information about all the sessions which were replayed by the user.

  • Saved Sessions: provides information about recorded ITM On-Prem (ObserveIT) sessions that were saved for viewing offline.

  • Configuration Changes: enables you to track configuration changes that were made while working in the Web Console.