Overview
Administrators can retrieve high-risk commands and use them to locate historical sessions, enabling more targeted auditing of user Ops behaviors.
Directions
Retrieval Operations
2. In the left sidebar, choose Cloud Audit > Ops Operation.
3. On the Session Records page, click the Command execution tab.
4. On the Command execution page, view the commands executed by Ops personnel, or click the icon to search. 5. On the Command execution page, click Replay to view the specific command execution details.
Downloading and Exporting
1. On the Command Execution page, download the retrieved command execution operations by clicking the in the top right corner of the list. 2. After the download is complete, click to go to the download task list and export the document to the local machine.