To be able to deploy the Session Recording solution you need to have the following packages installed: tlog, SSSD, cockpit-session-recording.
Note that session recording doesn’t work for graphical desktop sessions or Cockpit terminal sessions.
In order to work with session recording, your system will need to have the following installed:
SSSD (System Security Services Deamon)
For this workshop/lab the environment is already configured to have tlog and SSSD installed, but if you were to install these prerequisites yourself, you would run
sudo yum install -y tlog cockpit-session-recording systemd-journal-remote
Specify recorded users or user groups using SSSD by listing them directly in the RHEL 8 web console.
There are 2 configuration panes, a General and another for SSSD; scroll down if you don’t see the SSSD pane.
To keep things simple, choose the
All option in the
Scope pull-down menu of the SSSD pane, as shown below. Optionally choosing
Some will allow you to provide comma-separated lists of users and groups whose terminal sessions should be recorded.
Be sure to click
Save after making a selection.
You can export your recorded sessions and their logs and copy them.
The following procedure shows how to export recorded sessions on a local system.
1.5.1: Run the
journalctl -o export command in a terminal session:
sudo journalctl -o export | /usr/lib/systemd/systemd-journal-remote -o /tmp/test.journal -
This creates an export file from the system journal with all its entities.
You can then copy the exported file to the
/var/log/journal/ directory on another host.
You can also create the
/var/log/journal/remote/ directory for exported files from remote hosts.
There are two possibilities for replaying recorded sessions.
The first one is to use the
tlog-play command-line utility.
The second option is to manage your recorded sessions from the RHEL 8 web console, which we will use for this lab.
The RHEL 8 web console has a whole interface for managing recorded sessions. You can choose the session you want to review directly from the Session Recording page, where the list of your recorded session is.
Example 2.1: Example list of recorded sessions
By clicking on one of the sessions you are presented with a player to view the recording in as shown: