Command only recording on SSH

[fireballsp]

Hi,

It is possible to have recording only of commands without a fully session record?

Thanks

[webvictim]

This is the default if you run single non-interactive commands i.e. tsh ssh user@host ls -lR /

To get exactly what you want for interactive sessions, you could try:

• enabling enhanced session recordings (requires a 5.7+ kernel with BPF support compiled in) at the node level
• disabling regular session recordings at the cluster level.

I'm actually not sure if this works - but it might.

Auth/proxy server:

auth_service:
  enabled: true
  session_recording: off

Nodes:

ssh_service:
  enabled: true
  enhanced_recording:
    enabled: true

[fireballsp]

Hi,

Already tried this way, but applying this setting can't start teleport proxy got the error below:

ERROR: session recording is disabled at the cluster level. To enable enhanced session recording, enable session recording at the cluster level, then restart Teleport.

Thanks