Skip to main content

Recorded session search controls

The Session monitor app uses a powerful search engine to search recorded UI, clipboard, and keystroke data. You control the following options for the search engine in the Manage the system > Modules > Session monitor menu:

Table 1. Modules > Session monitor search engine settings

Option

Description

SMON SEARCH ENGINE CHARACTERS TO IGNORE

Characters that the SMON module search engine will ignore.

SMON SEARCH ENGINE WORD DELIMITERS

Characters that the SMON module search engine will treat as word delimiters.

SMON SEARCH ENGINE WORD MIN LENGTH

The minimum length of words that will be indexed and searchable by the SMON search engine.



These settings define what is considered a ’word’ and loaded into the database. The settings are used in the following order:

  1. SMON SEARCH ENGINE WORD DELIMITERS split the stream of information into blocks of characters.

  2. The characters in SMON SEARCH ENGINE CHARACTERS TO IGNORE are removed.

  3. If the number of characters in the block is greater than or equal to SMON SEARCH ENGINE WORD MIN LENGTH , then the block is loaded to be search.

If these settings above are changed, only new sessions will be affected. Existing loaded words must be used to search for matching sessions.

These settings are also applied to the Session matching contents field on the Search all recorded data page.

The following are examples of how the settings would be applied:

Recorded/Search

Stored/Searched words

555-555-4445

5555554445

cmd.exe

CMDEXE

http://bravurasecurity.com

HTTP BRAVURASECURITY COM

In this section: