Class: SDM::Query

Inherits:
Object
  • Object
show all
Defined in:
lib/models/porcelain.rb

Overview

A Query is a record of a single client request to a resource, such as a SQL query. Longer-running queries including long-running SSH commands and SSH, RDP, or Kubernetes interactive sessions will return two Query records with the same identifier, one record at the start of the query and a second record upon the completion of the query with additional detail.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(account_email: nil, account_first_name: nil, account_id: nil, account_last_name: nil, account_tags: nil, authzjson: nil, capture: nil, client_ip: nil, completed_at: nil, duration: nil, egress_node_id: nil, encrypted: nil, id: nil, identity_alias_username: nil, metadata_json: nil, query_body: nil, query_category: nil, query_hash: nil, query_key: nil, record_count: nil, remote_identity_username: nil, replayable: nil, resource_id: nil, resource_name: nil, resource_tags: nil, resource_type: nil, source_ip: nil, target: nil, timestamp: nil) ⇒ Query

Returns a new instance of Query.



11363
11364
11365
11366
11367
11368
11369
11370
11371
11372
11373
11374
11375
11376
11377
11378
11379
11380
11381
11382
11383
11384
11385
11386
11387
11388
11389
11390
11391
11392
11393
11394
11395
11396
11397
11398
11399
11400
11401
11402
11403
11404
11405
11406
11407
11408
11409
11410
11411
11412
11413
11414
11415
11416
11417
11418
11419
11420
11421
11422
11423
# File 'lib/models/porcelain.rb', line 11363

def initialize(
  account_email: nil,
  account_first_name: nil,
  account_id: nil,
  account_last_name: nil,
  account_tags: nil,
  authzjson: nil,
  capture: nil,
  client_ip: nil,
  completed_at: nil,
  duration: nil,
  egress_node_id: nil,
  encrypted: nil,
  id: nil,
  identity_alias_username: nil,
  metadata_json: nil,
  query_body: nil,
  query_category: nil,
  query_hash: nil,
  query_key: nil,
  record_count: nil,
  remote_identity_username: nil,
  replayable: nil,
  resource_id: nil,
  resource_name: nil,
  resource_tags: nil,
  resource_type: nil,
  source_ip: nil,
  target: nil,
  timestamp: nil
)
  @account_email =  == nil ? "" : 
  @account_first_name =  == nil ? "" : 
  @account_id =  == nil ? "" : 
  @account_last_name =  == nil ? "" : 
  @account_tags =  == nil ? SDM::_porcelain_zero_value_tags() : 
  @authzjson = authzjson == nil ? "" : authzjson
  @capture = capture == nil ? nil : capture
  @client_ip = client_ip == nil ? "" : client_ip
  @completed_at = completed_at == nil ? nil : completed_at
  @duration = duration == nil ? nil : duration
  @egress_node_id = egress_node_id == nil ? "" : egress_node_id
  @encrypted = encrypted == nil ? false : encrypted
  @id = id == nil ? "" : id
  @identity_alias_username = identity_alias_username == nil ? "" : identity_alias_username
  @metadata_json =  == nil ? "" : 
  @query_body = query_body == nil ? "" : query_body
  @query_category = query_category == nil ? "" : query_category
  @query_hash = query_hash == nil ? "" : query_hash
  @query_key = query_key == nil ? "" : query_key
  @record_count = record_count == nil ? 0 : record_count
  @remote_identity_username = remote_identity_username == nil ? "" : remote_identity_username
  @replayable = replayable == nil ? false : replayable
  @resource_id = resource_id == nil ? "" : resource_id
  @resource_name = resource_name == nil ? "" : resource_name
  @resource_tags = resource_tags == nil ? SDM::_porcelain_zero_value_tags() : resource_tags
  @resource_type = resource_type == nil ? "" : resource_type
  @source_ip = source_ip == nil ? "" : source_ip
  @target = target == nil ? "" : target
  @timestamp = timestamp == nil ? nil : timestamp
end

Instance Attribute Details

#account_emailObject

The email of the account performing this query, at the time the query was executed. If the account email is later changed, that change will not be reflected via this field.



11294
11295
11296
# File 'lib/models/porcelain.rb', line 11294

def 
  @account_email
end

#account_first_nameObject

The given name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



11297
11298
11299
# File 'lib/models/porcelain.rb', line 11297

def 
  @account_first_name
end

#account_idObject

Unique identifier of the Account that performed the Query.



11299
11300
11301
# File 'lib/models/porcelain.rb', line 11299

def 
  @account_id
end

#account_last_nameObject

The family name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



11302
11303
11304
# File 'lib/models/porcelain.rb', line 11302

def 
  @account_last_name
end

#account_tagsObject

The tags of the account accessed, at the time the query was executed. If the account tags are later changed, that change will not be reflected via this field.



11305
11306
11307
# File 'lib/models/porcelain.rb', line 11305

def 
  @account_tags
end

#authzjsonObject

Authorization metadata associated with this query.



11307
11308
11309
# File 'lib/models/porcelain.rb', line 11307

def authzjson
  @authzjson
end

#captureObject

For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query.



11310
11311
11312
# File 'lib/models/porcelain.rb', line 11310

def capture
  @capture
end

#client_ipObject

The IP address the Query was performed from, as detected at the StrongDM control plane.



11312
11313
11314
# File 'lib/models/porcelain.rb', line 11312

def client_ip
  @client_ip
end

#completed_atObject

The time at which the Query was completed. Empty if this record indicates the start of a long-running query.



11315
11316
11317
# File 'lib/models/porcelain.rb', line 11315

def completed_at
  @completed_at
end

#durationObject

The duration of the Query.



11317
11318
11319
# File 'lib/models/porcelain.rb', line 11317

def duration
  @duration
end

#egress_node_idObject

The unique ID of the node through which the Resource was accessed.



11319
11320
11321
# File 'lib/models/porcelain.rb', line 11319

def egress_node_id
  @egress_node_id
end

#encryptedObject

Indicates that the body of the Query is encrypted.



11321
11322
11323
# File 'lib/models/porcelain.rb', line 11321

def encrypted
  @encrypted
end

#idObject

Unique identifier of the Query.



11323
11324
11325
# File 'lib/models/porcelain.rb', line 11323

def id
  @id
end

#identity_alias_usernameObject

The username of the IdentityAlias used to access the Resource.



11325
11326
11327
# File 'lib/models/porcelain.rb', line 11325

def identity_alias_username
  @identity_alias_username
end

#metadata_jsonObject

Driver specific metadata associated with this query.



11327
11328
11329
# File 'lib/models/porcelain.rb', line 11327

def 
  @metadata_json
end

#query_bodyObject

The captured content of the Query. For queries against SSH, Kubernetes, and RDP resources, this contains a JSON representation of the QueryCapture.



11330
11331
11332
# File 'lib/models/porcelain.rb', line 11330

def query_body
  @query_body
end

#query_categoryObject

The general category of Resource against which Query was performed, e.g. "web" or "cloud".



11332
11333
11334
# File 'lib/models/porcelain.rb', line 11332

def query_category
  @query_category
end

#query_hashObject

The hash of the body of the Query.



11334
11335
11336
# File 'lib/models/porcelain.rb', line 11334

def query_hash
  @query_hash
end

#query_keyObject

The symmetric key used to encrypt the body of this Query and its replay if replayable. If the Query is encrypted, this field contains an encrypted symmetric key in base64 encoding. This key must be decrypted with the organization's private key to obtain the symmetric key needed to decrypt the body. If the Query is not encrypted, this field is empty.



11339
11340
11341
# File 'lib/models/porcelain.rb', line 11339

def query_key
  @query_key
end

#record_countObject

The number of records returned by the Query, for a database Resource.



11341
11342
11343
# File 'lib/models/porcelain.rb', line 11341

def record_count
  @record_count
end

#remote_identity_usernameObject

The username of the RemoteIdentity used to access the Resource.



11343
11344
11345
# File 'lib/models/porcelain.rb', line 11343

def remote_identity_username
  @remote_identity_username
end

#replayableObject

Indicates that the Query is replayable, e.g. for some SSH or K8s sessions.



11345
11346
11347
# File 'lib/models/porcelain.rb', line 11345

def replayable
  @replayable
end

#resource_idObject

Unique identifier of the Resource against which the Query was performed.



11347
11348
11349
# File 'lib/models/porcelain.rb', line 11347

def resource_id
  @resource_id
end

#resource_nameObject

The name of the resource accessed, at the time the query was executed. If the resource is later renamed, that change will not be reflected via this field.



11350
11351
11352
# File 'lib/models/porcelain.rb', line 11350

def resource_name
  @resource_name
end

#resource_tagsObject

The tags of the resource accessed, at the time the query was executed. If the resource tags are later changed, that change will not be reflected via this field.



11353
11354
11355
# File 'lib/models/porcelain.rb', line 11353

def resource_tags
  @resource_tags
end

#resource_typeObject

The specific type of Resource against which the Query was performed, e.g. "ssh" or "postgres".



11355
11356
11357
# File 'lib/models/porcelain.rb', line 11355

def resource_type
  @resource_type
end

#source_ipObject

The IP address the Query was performed from, as detected at the ingress gateway.



11357
11358
11359
# File 'lib/models/porcelain.rb', line 11357

def source_ip
  @source_ip
end

#targetObject

The target destination of the query, in host:port format.



11359
11360
11361
# File 'lib/models/porcelain.rb', line 11359

def target
  @target
end

#timestampObject

The time at which the Query was started.



11361
11362
11363
# File 'lib/models/porcelain.rb', line 11361

def timestamp
  @timestamp
end

Instance Method Details

#to_json(options = {}) ⇒ Object



11425
11426
11427
11428
11429
11430
11431
# File 'lib/models/porcelain.rb', line 11425

def to_json(options = {})
  hash = {}
  self.instance_variables.each do |var|
    hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
  end
  hash.to_json
end