Autopsy  4.1
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Member Functions | Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.keywordsearch.SearchRunner Class Reference


class  Searcher
class  SearchJobInfo
class  UpdateTimerTask

Public Member Functions

synchronized void addKeywordListsToAllJobs (List< String > keywordListNames)
void endJob (long jobId)
synchronized void startJob (long jobId, long dataSourceId, List< String > keywordListNames)
void stopJob (long jobId)

Static Public Member Functions

static synchronized SearchRunner getInstance ()

Private Member Functions

void commit ()
void doFinalSearch (SearchJobInfo job)

Private Attributes

Ingester ingester = null
Map< Long, SearchJobInfojobs = new HashMap<>()
IngestServices services = IngestServices.getInstance()
Timer updateTimer
volatile boolean updateTimerRunning = false

Static Private Attributes

static SearchRunner instance = null
static final Logger logger = Logger.getLogger(SearchRunner.class.getName())

Detailed Description

Singleton keyword search manager: Launches search threads for each job and performs commits, both on timed intervals.

Definition at line 50 of file

Member Function Documentation

synchronized void org.sleuthkit.autopsy.keywordsearch.SearchRunner.addKeywordListsToAllJobs ( List< String >  keywordListNames)

Add these lists to all of the jobs. Used when user wants to search for a list while ingest has already started.


Definition at line 167 of file

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit ( )
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.doFinalSearch ( SearchJobInfo  job)
void org.sleuthkit.autopsy.keywordsearch.SearchRunner.endJob ( long  jobId)

Perform normal finishing of searching for this job, including one last commit and search. Blocks until the final search is complete.


Definition at line 112 of file

References org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.decrementModuleReferenceCount(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.doFinalSearch().

Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.shutDown().

static synchronized SearchRunner org.sleuthkit.autopsy.keywordsearch.SearchRunner.getInstance ( )
synchronized void org.sleuthkit.autopsy.keywordsearch.SearchRunner.startJob ( long  jobId,
long  dataSourceId,
List< String >  keywordListNames 

Add a new job. Searches will be periodically performed after this is called.

jobIdJob ID that this is associated with
dataSourceIdData source that is being indexed and that searches should be restricted to.
keywordListNamesList of keyword lists that will be searched. List contents will be refreshed each search.

Definition at line 88 of file

Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.process().

void org.sleuthkit.autopsy.keywordsearch.SearchRunner.stopJob ( long  jobId)

Immediate stop and removal of job from SearchRunner. Cancels the associated search worker if it's still running.


Definition at line 140 of file

References org.sleuthkit.autopsy.keywordsearch.SearchRunner.commit(), and org.sleuthkit.autopsy.keywordsearch.SearchRunner.SearchJobInfo.getCurrentSearcher().

Referenced by org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.stop().

Member Data Documentation

Ingester org.sleuthkit.autopsy.keywordsearch.SearchRunner.ingester = null

Definition at line 55 of file

SearchRunner org.sleuthkit.autopsy.keywordsearch.SearchRunner.instance = null
Map<Long, SearchJobInfo> = new HashMap<>()

Definition at line 60 of file

final Logger org.sleuthkit.autopsy.keywordsearch.SearchRunner.logger = Logger.getLogger(SearchRunner.class.getName())

Definition at line 52 of file

IngestServices = IngestServices.getInstance()

Definition at line 54 of file

Timer org.sleuthkit.autopsy.keywordsearch.SearchRunner.updateTimer

Definition at line 57 of file

volatile boolean org.sleuthkit.autopsy.keywordsearch.SearchRunner.updateTimerRunning = false

Definition at line 56 of file

The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Tue Oct 25 2016
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.