Public Member Functions
	CombinedEvent (long epochMillis, String description, long fileID, Map< EventType, Long > eventMap)

boolean	equals (Object obj)

String	getDescription ()

ImmutableSet< Long >	getEventIDs ()

Set< EventType >	getEventTypes ()

long	getFileID ()

Long	getRepresentativeEventID ()

long	getStartMillis ()

int	hashCode ()

Private Attributes
final String	description

final long	epochMillis

final Map< EventType, Long >	eventTypeMap = new HashMap<>()

final long	fileID

Detailed Description

A container for several events that have the same timestamp and description and are backed by the same file. Used in the ListView to coalesce the file system events for a file when they have the same timestamp.

Definition at line 33 of file CombinedEvent.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.CombinedEvent	(	long	epochMillis,
		String	description,
		long	fileID,
		Map< EventType, Long >	eventMap
	)

Constructor

Parameters

epochMillis	The timestamp for this event, in millis from the Unix epoch.
description	The full description shared by all the combined events
fileID	The ID of the file shared by all the combined events.
eventMap	A map from EventType to event ID.

Definition at line 53 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.description, org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.epochMillis, and org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.fileID.

Referenced by org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.equals().

Member Function Documentation

boolean org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.equals ( Object obj )

Definition at line 127 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.CombinedEvent(), org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.description, org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.epochMillis, org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.eventTypeMap, and org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.fileID.

String org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getDescription ( )

Get the full description shared by all the combined events.

Returns: The full description shared by all the combined events.

Definition at line 74 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.description.

ImmutableSet<Long> org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getEventIDs ( )

Get the event IDs of the combined events.

Returns: The event IDs of the combined events.

Definition at line 101 of file CombinedEvent.java.

Set<EventType> org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getEventTypes ( )

Get the types of the combined events.

Returns: The types of the combined events.

Definition at line 92 of file CombinedEvent.java.

Referenced by org.sleuthkit.autopsy.timeline.ui.listvew.ListTimeline.EventTypeCell.updateItem().

long org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getFileID ( )

Get the obj ID of the file shared by the combined events.

Returns: The obj ID of the file shared by the combined events.

Definition at line 83 of file CombinedEvent.java.

References org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.fileID.

Long org.sleuthkit.autopsy.timeline.datamodel.CombinedEvent.getRepresentativeEventID ( )

Get the event ID of one event that is representative of all the combined events. It can be used to look up a SingleEvent with more details, for example.