Autopsy
4.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | Core |
enum | CORE_EVT_STATES |
class | InputStreamPrinterThread |
enum | Schema |
class | ServerAction |
class | SolrServerNoPortException |
Public Member Functions | |
void | addServerActionListener (PropertyChangeListener l) |
void | finalize () throws java.lang.Throwable |
String | getSolrContent (final Content content) throws NoOpenCoreException |
String | getSolrContent (final Content content, int chunkID) throws NoOpenCoreException |
String | getSolrContent (final long objectID) throws NoOpenCoreException |
String | getSolrContent (final long objectID, final int chunkID) throws NoOpenCoreException |
QueryResponse | query (SolrQuery sq) throws KeywordSearchModuleException, NoOpenCoreException |
QueryResponse | query (SolrQuery sq, SolrRequest.METHOD method) throws KeywordSearchModuleException, NoOpenCoreException |
boolean | queryIsIndexed (long contentID) throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumFileChunks (long fileID) throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedChunks () throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedDocuments () throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedFiles () throws KeywordSearchModuleException, NoOpenCoreException |
TermsResponse | queryTerms (SolrQuery sq) throws KeywordSearchModuleException, NoOpenCoreException |
Static Public Member Functions | |
static String | getChunkIdString (long parentID, int childID) |
static Ingester | getIngester () |
Static Public Attributes | |
static final String | CORE_EVT = "CORE_EVT" |
static final Charset | DEFAULT_INDEXED_TEXT_CHARSET = Charset.forName("UTF-8") |
default Charset to index text as More... | |
static final String | HL_ANALYZE_CHARS_UNLIMITED = "500000" |
static final char | ID_CHUNK_SEP = '_' |
static final long | MAX_CONTENT_SIZE = 1L * 1024 * 1024 * 1024 |
Private Member Functions | |
boolean | coreExistsOnServer (String coreName) throws SolrServerException, IOException |
boolean | coreIndexFolderExists (String coreName) throws SolrServerException, IOException |
void | initSettings () |
Core | openCore (Case theCase) throws KeywordSearchModuleException |
Core | openCore (String coreName, File dataDir, CaseType caseType) throws KeywordSearchModuleException |
Private Attributes | |
Core | currentCore |
final ReentrantReadWriteLock | currentCoreLock |
HttpSolrServer | currentSolrServer |
int | currentSolrServerPort = 0 |
int | currentSolrStopPort = 0 |
Process | curSolrProcess = null |
InputStreamPrinterThread | errorRedirectThread |
String | javaPath = "java" |
final HttpSolrServer | localSolrServer |
final ServerAction | serverAction |
final File | solrFolder |
UNCPathUtilities | uncPathUtilities = null |
Static Private Attributes | |
static final boolean | DEBUG = false |
static final String | DEFAULT_CORE_NAME = "coreCase" |
static final String | KEY = "jjk#09s" |
static final Logger | logger = Logger.getLogger(Server.class.getName()) |
static final int | MAX_SOLR_MEM_MB = 512 |
Handles for keeping track of a Solr server and its cores
Definition at line 74 of file Server.java.
void org.sleuthkit.autopsy.keywordsearch.Server.addServerActionListener | ( | PropertyChangeListener | l | ) |
Definition at line 244 of file Server.java.
|
private |
Determines whether or not a Solr core instance exists on the current Solr server.
coreName | the name of the core. |
SolrServerException | |
IOException |
Definition at line 1119 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
|
private |
Determines whether or not the index files folder for a Solr core exists.
coreName | the name of the core. |
SolrServerException | |
IOException |
Definition at line 1134 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
void org.sleuthkit.autopsy.keywordsearch.Server.finalize | ( | ) | throws java.lang.Throwable |
Definition at line 239 of file Server.java.
|
static |
Given file parent id and child chunk ID, return the ID string of the chunk as stored in Solr, e.g. FILEID_CHUNKID
parentID | the parent file id (id of the source content) |
childID | the child chunk id |
Definition at line 1048 of file Server.java.
References org.sleuthkit.autopsy.keywordsearch.Server.ID_CHUNK_SEP.
|
static |
Method to return ingester instance
Definition at line 1035 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final Content | content | ) | throws NoOpenCoreException |
Get the text contents of the given file as stored in SOLR.
content | to get the text for |
NoOpenCoreException |
Definition at line 951 of file Server.java.
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final Content | content, |
int | chunkID | ||
) | throws NoOpenCoreException |
Get the text contents of a single chunk for the given file as stored in SOLR.
content | to get the text for |
chunkID | chunk number to query (starting at 1), or 0 if there is no chunks for that content |
NoOpenCoreException |
Definition at line 975 of file Server.java.
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final long | objectID | ) | throws NoOpenCoreException |
Get the text contents for the given object id.
objectID |
NoOpenCoreException |
Definition at line 996 of file Server.java.
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final long | objectID, |
final int | chunkID | ||
) | throws NoOpenCoreException |
Get the text contents for the given object id and chunk id.
objectID | |
chunkID |
NoOpenCoreException |
Definition at line 1018 of file Server.java.
|
private |
|
private |
** end single-case specific methods *** Open a core for the given case
theCase | the case to open core for |
Definition at line 685 of file Server.java.
References org.sleuthkit.autopsy.core.UserPreferences.getIndexingServerHost(), org.sleuthkit.autopsy.core.UserPreferences.getIndexingServerPort(), org.sleuthkit.autopsy.keywordsearch.Server.localSolrServer, and org.sleuthkit.autopsy.casemodule.Case.CaseType.SINGLE_USER_CASE.
|
private |
Open a new core
coreName | name to refer to the core by in Solr |
dataDir | directory to load/store the core data from/to |
Definition at line 1060 of file Server.java.
References org.sleuthkit.autopsy.keywordsearch.Server.coreExistsOnServer(), and org.sleuthkit.autopsy.keywordsearch.Server.coreIndexFolderExists().
QueryResponse org.sleuthkit.autopsy.keywordsearch.Server.query | ( | SolrQuery | sq | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute solr query
sq | query |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 873 of file Server.java.
QueryResponse org.sleuthkit.autopsy.keywordsearch.Server.query | ( | SolrQuery | sq, |
SolrRequest.METHOD | method | ||
) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute solr query
sq | the query |
method | http method to use |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 900 of file Server.java.
boolean org.sleuthkit.autopsy.keywordsearch.Server.queryIsIndexed | ( | long | contentID | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Return true if the file is indexed (either as a whole as a chunk)
contentID |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 819 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.solrHasContent().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumFileChunks | ( | long | fileID | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets number of indexed file chunks for a file
fileID | file id of the original file broken into chunks and indexed |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 847 of file Server.java.
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedChunks | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr file chunks (not logical files) indexed without actually returning the content.
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 768 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedDocuments | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr documents indexed (files and chunks) without actually returning the documents
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 793 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedFiles | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr files indexed without actually returning the files. The result does not include chunks, only number of actual files.
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 743 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.KeywordPropertyChangeListener.propertyChange(), and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().
TermsResponse org.sleuthkit.autopsy.keywordsearch.Server.queryTerms | ( | SolrQuery | sq | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute Solr terms query
sq | the query |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 926 of file Server.java.
|
static |
Definition at line 156 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.KeywordPropertyChangeListener.propertyChange().
|
private |
Definition at line 186 of file Server.java.
|
private |
Definition at line 187 of file Server.java.
|
private |
Definition at line 184 of file Server.java.
|
private |
Definition at line 169 of file Server.java.
|
private |
Definition at line 170 of file Server.java.
|
private |
Definition at line 161 of file Server.java.
|
staticprivate |
Definition at line 171 of file Server.java.
|
staticprivate |
Definition at line 155 of file Server.java.
|
static |
default Charset to index text as
Definition at line 159 of file Server.java.
|
private |
Definition at line 191 of file Server.java.
|
static |
Definition at line 151 of file Server.java.
|
static |
Definition at line 157 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.LuceneQuery.SolrDocumentComparatorIgnoresChunkId.compare(), and org.sleuthkit.autopsy.keywordsearch.Server.getChunkIdString().
|
private |
Definition at line 158 of file Server.java.
|
staticprivate |
Definition at line 165 of file Server.java.
|
private |
Definition at line 177 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.Server.openCore().
|
staticprivate |
Definition at line 154 of file Server.java.
|
static |
Definition at line 153 of file Server.java.
|
staticprivate |
Definition at line 160 of file Server.java.
|
private |
Definition at line 190 of file Server.java.
|
private |
Definition at line 189 of file Server.java.
|
private |
Definition at line 172 of file Server.java.
Copyright © 2012-2015 Basis Technology. Generated on: Wed Apr 6 2016
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.