Session recording event policy troubleshooting

Session recording event policy troubleshooting

book

Article ID: CTX250241

calendar_today

Updated On:

Description

Earlier in the Session Recording Agent, the registry keys were added for enabling or disabling the events.
Centralized configuration of event logging policies since version 1811 provided new ways of avoiding editing the registry on each VDA. However, to troubleshoot on specific VDA, higher priority way to configure registry provides convenience.
 

Resolution

To enable the troubleshooting of event policies, do the following:
  1. After the Session Recording installation is complete, log on as an administrator to the machine where you installed the Session Recording Agent.
  2. Open the Registry Editor and create TS under HKLM\SOFTWARE\Citrix\SmartAuditor\SessionEvents by a user who has the permission
Set the value of event policy key to 1 under HKLM\SOFTWARE\Citrix\SmartAuditor\SessionEvents\TS as following table.
 
Registry KeyTypeDescription
EnableSessionEventsREG_DWORD1: enables event logging globally; 0: disables event logging globally (default value).
EnableCDMUSBDriveEventsREG_DWORD1: enables logging the insertion of CDM mapped USB mass storage devices; 0: disables logging the insertion of CDM mapped USB mass storage devices (default value).
EnableGenericUSBDriveEventsREG_DWORD1: enables logging the insertion of generic redirected USB mass storage devices; 0: disables logging the insertion of generic redirected USB mass storage devices (default value).
EnableAppLaunchEventsREG_DWORD1: enables logging only application starts; 2: enables logging both application starts and ends; 0: disables logging application starts and ends (default value).
AppMonitorListREG_MULTI_SZSpecifies target applications to monitor, separates the application names with space. No application is specified by default, which means no application is captured by default.
EnableFileOperationMonitorEventsREG_DWORD1: enables logging file operations; 0: disables logging file operations (default value).
FileOperationMonitorListREG_MULTI_SZSpecifies target folders to monitor,separates the absolute paths of target files with space. No folder is specified by default, which means no file operation is captured by default.

Tips: New event policies after version 1811 may not support troubleshooting via registry

  3. Restart the Session Recording Agent to make your setting take effect.

Disclaimer:
Incorrectly editing the registry can cause serious problems that might require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. Be sure to back up the registry before you edit it.