Autopsy  3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Member Functions | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.keywordsearch.SearchRunner Class Reference


class  Searcher
class  SearchJobInfo
class  UpdateTimerTask

Public Member Functions

synchronized void startJob (long jobId, long dataSourceId, List< String > keywordListNames)
void endJob (long jobId)
void stopJob (long jobId)
synchronized void addKeywordListsToAllJobs (List< String > keywordListNames)

Static Public Member Functions

static synchronized SearchRunner getInstance ()

Private Member Functions

void commit ()
void doFinalSearch (SearchJobInfo job)

Private Attributes

IngestServices services = IngestServices.getInstance()
Ingester ingester = null
volatile boolean updateTimerRunning = false
Timer updateTimer
Map< Long, SearchJobInfojobs = new HashMap<>()

Static Private Attributes

static final Logger logger = Logger.getLogger(SearchRunner.class.getName())
static SearchRunner instance = null

Detailed Description

Singleton keyword search manager: Launches search threads for each job and performs commits, both on timed intervals.

Definition at line 52 of file

Member Function Documentation

synchronized void org.sleuthkit.autopsy.keywordsearch.SearchRunner.addKeywordListsToAllJobs ( List< String >  keywordListNames)

Add these lists to all of the jobs. Used when user wants to search for a list while ingest has already started.


Definition at line 161 of file

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit ( )
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.doFinalSearch ( SearchJobInfo  job)
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.endJob ( long  jobId)

Perform normal finishing of searching for this job, including one last commit and search. Blocks until the final search is complete.


Definition at line 108 of file

References org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.decrementModuleReferenceCount(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.doFinalSearch().

Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().

static synchronized SearchRunner org.sleuthkit.autopsy.keywordsearch.SearchRunner.getInstance ( )
synchronized void org.sleuthkit.autopsy.keywordsearch.SearchRunner.startJob ( long  jobId,
long  dataSourceId,
List< String >  keywordListNames 

Add a new job. Searches will be periodically performed after this is called.

jobIdJob ID that this is associated with
dataSourceIdData source that is being indexed and that searches should be restricted to.
keywordListNamesList of keyword lists that will be searched. List contents will be refreshed each search.

Definition at line 85 of file

Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.process().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.stopJob ( long  jobId)

Immediate stop and removal of job from SearchRunner. Cancels the associated search worker if it's still running.


Definition at line 136 of file

References org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.getCurrentSearcher().

Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.stop().

Member Data Documentation

Ingester org.sleuthkit.autopsy.keywordsearch.SearchRunner.ingester = null

Definition at line 56 of file

SearchRunner org.sleuthkit.autopsy.keywordsearch.SearchRunner.instance = null
Map<Long, SearchJobInfo> = new HashMap<>()

Definition at line 61 of file

final Logger org.sleuthkit.autopsy.keywordsearch.SearchRunner.logger = Logger.getLogger(SearchRunner.class.getName())

Definition at line 53 of file

IngestServices = IngestServices.getInstance()

Definition at line 55 of file

Timer org.sleuthkit.autopsy.keywordsearch.SearchRunner.updateTimer

Definition at line 58 of file

volatile boolean org.sleuthkit.autopsy.keywordsearch.SearchRunner.updateTimerRunning = false

Definition at line 57 of file

The documentation for this class was generated from the following file:

Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.