Client Recorder Extension commands

When you have created a Client Recorder Extension configuration, you can control the Client Recorder Extension by issuing commands.

To understand how to apply Client Recorder Extension commands, refer to any “Recorder” packages installed alongside the Client Recorder Extension. These packages demonstrate how to provide commands. For example ‘Recorder - Clear Subscriptions [Windows]’ demonstrates the use of the recorder command ‘recorder.uninstall’.


Adds a subscription to the Client Recorder Extension. To update or change a subscription, issue this command with updated configuration information and use the same name and domain. The name and domain are configured by using the FileInfoProviderName and FileInfoProviderDomain configuration settings.


Returns the subscription the product registered.


Removes subscriptions added by recorder.register-subscription. For the last subscription, uninstall is called and removes all audit rules.


Constructs a SQL command and run against the recorder database.


Backs up the recorder database to a directory.


Ensures that the event sources are disabled, audit rules are removed properly, and all subscriptions are removed. The effect of returning the system back to initial install. The exception when the auditing system is in immutable mode, on system reboot, it returns to initial state.


Enables the capture of events to support the replay of data from event sources. Captures data to extensions\recorder\stage2.bin. Disabled by default.


Disables the capture of events.


Resets the resource monitor in the event that the recorder was stopped because of a health check. If the recorder is stopped because of a health check, the following message is returned: Subscriptions suspended due to resource monitoring exceeded.


On next reboot the recorder database is deleted and re-created.


Enables the paths of files to filter from the Linux audit daemon (auditd) logging.


Disables the paths of files to filter from the Linux audit daemon (auditd) logging.


Returns an enumeration of all system exclusions.