org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher Class Reference

Inherits SwingWorker< Object, Void >.

Protected Member Functions
Object	doInBackground () throws Exception

Private Member Functions
QueryResults	filterResults (QueryResults queryResult)
void	finalizeSearcher ()
void	updateKeywords ()

Private Attributes
boolean	finalRun = false
SearchJobInfo	job
List< String >	keywordListNames
List< KeywordList >	keywordLists
List< Keyword >	keywords
Map< Keyword, KeywordList >	keywordToList
final Logger	logger = Logger.getLogger(IngestSearchRunner.Searcher.class.getName())
AggregateProgressHandle	progressGroup

Detailed Description

Searcher responsible for searching the current index and writing results to blackboard and the inbox. Also, posts results to listeners as Ingest data events. Searches entire index, and keeps track of only new results to report and save. Runs as a background thread.

Definition at line 445 of file IngestSearchRunner.java.

Member Function Documentation

Object org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground ( ) throws Exception

protected

Definition at line 475 of file IngestSearchRunner.java.

References org.sleuthkit.autopsy.coreutils.MessageNotifyUtil.Notify.error(), org.sleuthkit.autopsy.ingest.IngestJobContext.fileIngestIsCancelled(), org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.filterResults(), org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.finalizeSearcher(), org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.SearchJobInfo.getDataSourceId(), org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.SearchJobInfo.getJobContext(), org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.SearchJobInfo.searchNotify(), org.sleuthkit.autopsy.coreutils.StopWatch.start(), org.sleuthkit.autopsy.coreutils.StopWatch.stop(), and org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.updateKeywords().

QueryResults org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.filterResults ( QueryResults  queryResult )

private

This method filters out all of the hits found in earlier periodic searches and returns only the results found by the most recent search.

This method will only return hits for objects for which we haven't previously seen a hit for the keyword.

Parameters

queryResult

The results returned by a keyword search.

Returns

A unique set of hits found by the most recent search for objects that have not previously had a hit. The hits will be for the lowest numbered chunk associated with the object.

Definition at line 643 of file IngestSearchRunner.java.

References org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.SearchJobInfo.addKeywordResults(), and org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.SearchJobInfo.currentKeywordResults().

Referenced by org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.finalizeSearcher ( )

private

Performs the cleanup that needs to be done right AFTER doInBackground() returns without relying on done() method that is not guaranteed to run.

Definition at line 619 of file IngestSearchRunner.java.

Referenced by org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground().

void org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.updateKeywords ( )

private

Sync-up the updated keywords from the currently used lists in the XML

Definition at line 597 of file IngestSearchRunner.java.

Referenced by org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.doInBackground().

Member Data Documentation

boolean org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.finalRun = false

private

Definition at line 457 of file IngestSearchRunner.java.

SearchJobInfo org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.job

private

Searcher has private copies/snapshots of the lists and keywords

Definition at line 450 of file IngestSearchRunner.java.

List<String> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywordListNames

private

Definition at line 452 of file IngestSearchRunner.java.

List<KeywordList> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywordLists

private

Definition at line 453 of file IngestSearchRunner.java.

List<Keyword> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywords

private

Definition at line 451 of file IngestSearchRunner.java.

Map<Keyword, KeywordList> org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.keywordToList

private

Definition at line 454 of file IngestSearchRunner.java.

final Logger org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.logger = Logger.getLogger(IngestSearchRunner.Searcher.class.getName())

private

Definition at line 456 of file IngestSearchRunner.java.

AggregateProgressHandle org.sleuthkit.autopsy.keywordsearch.IngestSearchRunner.Searcher.progressGroup

private

Definition at line 455 of file IngestSearchRunner.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/autopsy/KeywordSearch/src/org/sleuthkit/autopsy/keywordsearch/IngestSearchRunner.java