Mac Agent Components

ObserveIT logger is an agent that records user actions. It collects the metadata and screenshots for every user session and transmits the recorded data to the Application server when online. In offline mode, the logger sends the data to one of the relevant OIT services.

ITM On-Prem (ObserveIT) component that implements warning and blocking actions.

ITM On-Prem (ObserveIT) command line management tool.

Here are some of its capabilities:

• Collecting health monitor status and sending to the server

• Sending heartbeats to the server

• Sending offline data to the server when connection resumes

• Triggering warning notification/blocking message applications, when needed

• Collecting data access activity and correlate tracked file activity with the logger

• Collecting offline data from the logger and saving to disk

The Application Server collects recorded data is sent by the Agents and stores it in the SQL Server databases for view and searching.

By default, ITM On-Prem (ObserveIT) uses Microsoft SQL Server databases for data storage. This storage includes user activity configuration data, user analytics data, textual audit metadata and possibly the screenshots captured by the ITM On-Prem (ObserveIT) Agents for video replay.

The Web Console si tool you use to view recorded sessions from all activities on the monitored endpoints, replay sessions, monitor SQL queries against the databases, view and manage alerts for suspicious user activities, search for sessions and user activities inside the database, generate reports on sessions and user activities, and perform all the configuration tasks required by your design criteria and operational needs.