User Activity
Complete the following fields:
Option | Description |
---|---|
General | |
Monitor this data source and collect activity data |
Enable monitoring of the selected data source and configure Netwrix Auditor to collect and store audit data. |
Notify users about activity monitoring |
You can enable the message that will be displayed when a user logs in and specify the message text. |
Record video of user activity within sessions |
By default, this option is disabled. |
Video Recording
NOTE: For these settings to become effective, enable video recording on the General tab. |
|
Adjust video quality |
Optimize video file by adjusting the following:
|
Adjust video duration |
Limit video file length by adjusting the following:
|
Set a retention period to clear stale videos |
When the selected retention period is over, Netwrix Auditor deletes your video recordings. |
Users | |
Specify users to track their activity |
Select the users whose activity should be recorded. You can select All users or create a list of Specific users or user groups. Certain users can also be added to Exceptions list. |
Applications | |
Specify applications you want to track |
Select Windows applications that you want to monitor. Available options:
In both cases, you can specify application to exclude from monitoring — for that, select the Exceptions option. For more information, see How to include/exclude applications. |
![]() |
|
Monitored Computers | |
For a newly created monitoring plan for User Activity, the list of monitored computers is empty. Add items to your monitoring plan and wait until Netwrix Auditor retrieves all computers within these items. See Add Items for Monitoring for more information. The list contains computer name, its current status and last activity time. |
Review your data source settings and click Add to go back to your plan. The newly created data source will appear in the Data source list. As a next step, click Add item to specify an object for monitoring. See Add Items for Monitoring for more information.
How to include/exclude applications
To create a list of application to include in / exclude from monitoring, you will need to provide:
- Title — application title as shown on top of the application window, for example, MonthlyReport.docx - Word.
- Description — as shown in the Description column on the Details tab of Windows Task Manager.
TIP: Title can also be found in the "What" column of related Netwrix Auditor reports and search results, for example, in the User Sessions report.
TIP: Using Description can help to filter out several components of a single application — for example, all executables having TeamViewer 14 description belong to the same app (see the screenshot above).
To create a list of inclusions / exclusions for applications:
- Click Add on the right of the list.
- Enter application title and description you have identified.
Wildcards (*?) are supported and applied as follows:
- * - Notepad (the "Title" filter) will exclude all Notepad windows.
- colo?r * (the "Title" filter) will exclude all application window titles containing "color" or "colour".
NOTE: Same logic applies to the inclusion rules.
Example
To exclude the Notepad application window with "Document1" open, add the following filter values:
-
In the Title filter enter "Document1.txt - Notepad":
- In the Description filter, enter the corresponding value, here it will be "Notepad".