Autopsy
3.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
|
Classes | |
class | Core |
enum | CORE_EVT_STATES |
class | InputStreamPrinterThread |
enum | Schema |
class | ServerAction |
class | SolrServerNoPortException |
Public Member Functions | |
void | finalize () throws java.lang.Throwable |
void | addServerActionListener (PropertyChangeListener l) |
int | queryNumIndexedFiles () throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedChunks () throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumIndexedDocuments () throws KeywordSearchModuleException, NoOpenCoreException |
boolean | queryIsIndexed (long contentID) throws KeywordSearchModuleException, NoOpenCoreException |
int | queryNumFileChunks (long fileID) throws KeywordSearchModuleException, NoOpenCoreException |
QueryResponse | query (SolrQuery sq) throws KeywordSearchModuleException, NoOpenCoreException |
QueryResponse | query (SolrQuery sq, SolrRequest.METHOD method) throws KeywordSearchModuleException, NoOpenCoreException |
TermsResponse | queryTerms (SolrQuery sq) throws KeywordSearchModuleException, NoOpenCoreException |
String | getSolrContent (final Content content) throws NoOpenCoreException |
String | getSolrContent (final Content content, int chunkID) throws NoOpenCoreException |
Static Public Member Functions | |
static Ingester | getIngester () |
static String | getChunkIdString (long parentID, int childID) |
Static Public Attributes | |
static final String | HL_ANALYZE_CHARS_UNLIMITED = "500000" |
static final long | MAX_CONTENT_SIZE = 1L * 1024 * 1024 * 1024 |
static final String | CORE_EVT = "CORE_EVT" |
static final char | ID_CHUNK_SEP = '_' |
static final Charset | DEFAULT_INDEXED_TEXT_CHARSET = Charset.forName("UTF-8") |
default Charset to index text as More... | |
Private Member Functions | |
void | initSettings () |
void | validateIndexLocation (Case theCase) |
synchronized Core | openCore (Case theCase) throws KeywordSearchModuleException |
Core | openCore (String coreName, File dataDir) throws KeywordSearchModuleException |
Private Attributes | |
String | javaPath = "java" |
Process | curSolrProcess = null |
int | currentSolrServerPort = 0 |
int | currentSolrStopPort = 0 |
SolrServer | solrServer |
String | instanceDir |
File | solrFolder |
ServerAction | serverAction |
InputStreamPrinterThread | errorRedirectThread |
String | solrUrl |
volatile Core | currentCore = null |
Static Private Attributes | |
static final Logger | logger = Logger.getLogger(Server.class.getName()) |
static final String | DEFAULT_CORE_NAME = "coreCase" |
static final int | MAX_SOLR_MEM_MB = 512 |
static Ingester | ingester = null |
static final String | KEY = "jjk#09s" |
static final boolean | DEBUG = false |
Handles for keeping track of a Solr server and its cores
Definition at line 69 of file Server.java.
void org.sleuthkit.autopsy.keywordsearch.Server.addServerActionListener | ( | PropertyChangeListener | l | ) |
Definition at line 229 of file Server.java.
void org.sleuthkit.autopsy.keywordsearch.Server.finalize | ( | ) | throws java.lang.Throwable |
Definition at line 224 of file Server.java.
|
static |
Given file parent id and child chunk ID, return the ID string of the chunk as stored in Solr, e.g. FILEID_CHUNKID
parentID | the parent file id (id of the source content) |
childID | the child chunk id |
Definition at line 906 of file Server.java.
References org.sleuthkit.autopsy.keywordsearch.Server.ID_CHUNK_SEP.
|
static |
Method to return ingester instance
Definition at line 894 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final Content | content | ) | throws NoOpenCoreException |
Get the text contents of the given file as stored in SOLR.
content | to get the text for |
NoOpenCoreException |
Definition at line 839 of file Server.java.
String org.sleuthkit.autopsy.keywordsearch.Server.getSolrContent | ( | final Content | content, |
int | chunkID | ||
) | throws NoOpenCoreException |
Get the text contents of a single chunk for the given file as stored in SOLR.
content | to get the text for |
chunkID | chunk number to query (starting at 1), or 0 if there is no chunks for that content |
NoOpenCoreException |
Definition at line 855 of file Server.java.
|
private |
|
private |
** end single-case specific methods *** Open a core for the given case
theCase | the case to open core for |
Definition at line 643 of file Server.java.
|
private |
Open a new core
coreName | name to refer to the core by in Solr |
dataDir | directory to load/store the core data from/to |
Definition at line 917 of file Server.java.
QueryResponse org.sleuthkit.autopsy.keywordsearch.Server.query | ( | SolrQuery | sq | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute solr query
sq | query |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 779 of file Server.java.
QueryResponse org.sleuthkit.autopsy.keywordsearch.Server.query | ( | SolrQuery | sq, |
SolrRequest.METHOD | method | ||
) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute solr query
sq | the query |
method | http method to use |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 800 of file Server.java.
boolean org.sleuthkit.autopsy.keywordsearch.Server.queryIsIndexed | ( | long | contentID | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Return true if the file is indexed (either as a whole as a chunk)
contentID |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 738 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.ExtractedContentViewer.solrHasContent().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumFileChunks | ( | long | fileID | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets number of indexed file chunks for a file
fileID | file id of the original file broken into chunks and indexed |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 759 of file Server.java.
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedChunks | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr file chunks (not logical files) indexed without actually returning the content.
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 698 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedDocuments | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr documents indexed (files and chunks) without actually returning the documents
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 718 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp().
int org.sleuthkit.autopsy.keywordsearch.Server.queryNumIndexedFiles | ( | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute query that gets only number of all Solr files indexed without actually returning the files. The result does not include chunks, only number of actual files.
KeywordSearchModuleException | |
NoOpenCoreExceptionn |
Definition at line 676 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.KeywordPropertyChangeListener.propertyChange(), and org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().
TermsResponse org.sleuthkit.autopsy.keywordsearch.Server.queryTerms | ( | SolrQuery | sq | ) | throws KeywordSearchModuleException, NoOpenCoreException |
Execute Solr terms query
sq | the query |
KeywordSearchModuleException | |
NoOpenCoreException |
Definition at line 820 of file Server.java.
|
private |
Checks if index dir exists, and moves it to new location if needed (for backwards compatibility with older cases)
Definition at line 585 of file Server.java.
References org::sleuthkit::datamodel::AbstractFile.exists(), org.sleuthkit.autopsy.casemodule.Case.getCaseDirectory(), and org::sleuthkit::datamodel::AbstractContent.getParent().
|
static |
Definition at line 151 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.DropdownToolbar.KeywordPropertyChangeListener.propertyChange().
|
private |
** Convenience methods for use while we only open one case at a time ***
Definition at line 565 of file Server.java.
|
private |
Definition at line 164 of file Server.java.
|
private |
Definition at line 165 of file Server.java.
|
private |
Definition at line 156 of file Server.java.
|
staticprivate |
Definition at line 166 of file Server.java.
|
staticprivate |
Definition at line 149 of file Server.java.
|
static |
default Charset to index text as
Definition at line 154 of file Server.java.
|
private |
Definition at line 176 of file Server.java.
|
static |
Definition at line 145 of file Server.java.
|
static |
Definition at line 152 of file Server.java.
Referenced by org.sleuthkit.autopsy.keywordsearch.LuceneQuery.SolrDocumentComparatorIgnoresChunkId.compare(), and org.sleuthkit.autopsy.keywordsearch.Server.getChunkIdString().
|
staticprivate |
Definition at line 157 of file Server.java.
|
private |
Definition at line 173 of file Server.java.
|
private |
Definition at line 153 of file Server.java.
|
staticprivate |
Definition at line 161 of file Server.java.
|
staticprivate |
Definition at line 148 of file Server.java.
|
static |
Definition at line 147 of file Server.java.
|
staticprivate |
Definition at line 155 of file Server.java.
|
private |
Definition at line 175 of file Server.java.
|
private |
Definition at line 174 of file Server.java.
|
private |
Definition at line 171 of file Server.java.
|
private |
Definition at line 177 of file Server.java.
Copyright © 2012-2015 Basis Technology. Generated on: Mon Oct 19 2015
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.