Class: SDM::Query

Inherits:
Object
  • Object
show all
Defined in:
lib/models/porcelain.rb

Overview

A Query is a record of a single client request to a resource, such as a SQL query. Longer-running queries including long-running SSH commands and SSH, RDP, or Kubernetes interactive sessions will return two Query records with the same identifier, one record at the start of the query and a second record upon the completion of the query with additional detail.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(account_email: nil, account_first_name: nil, account_id: nil, account_last_name: nil, account_tags: nil, authzjson: nil, capture: nil, client_ip: nil, completed_at: nil, duration: nil, egress_node_id: nil, encrypted: nil, id: nil, identity_alias_username: nil, metadata_json: nil, query_body: nil, query_category: nil, query_hash: nil, query_key: nil, record_count: nil, remote_identity_username: nil, replayable: nil, resource_id: nil, resource_name: nil, resource_tags: nil, resource_type: nil, source_ip: nil, target: nil, timestamp: nil) ⇒ Query

Returns a new instance of Query.



12641
12642
12643
12644
12645
12646
12647
12648
12649
12650
12651
12652
12653
12654
12655
12656
12657
12658
12659
12660
12661
12662
12663
12664
12665
12666
12667
12668
12669
12670
12671
12672
12673
12674
12675
12676
12677
12678
12679
12680
12681
12682
12683
12684
12685
12686
12687
12688
12689
12690
12691
12692
12693
12694
12695
12696
12697
12698
12699
12700
12701
# File 'lib/models/porcelain.rb', line 12641

def initialize(
  account_email: nil,
  account_first_name: nil,
  account_id: nil,
  account_last_name: nil,
  account_tags: nil,
  authzjson: nil,
  capture: nil,
  client_ip: nil,
  completed_at: nil,
  duration: nil,
  egress_node_id: nil,
  encrypted: nil,
  id: nil,
  identity_alias_username: nil,
  metadata_json: nil,
  query_body: nil,
  query_category: nil,
  query_hash: nil,
  query_key: nil,
  record_count: nil,
  remote_identity_username: nil,
  replayable: nil,
  resource_id: nil,
  resource_name: nil,
  resource_tags: nil,
  resource_type: nil,
  source_ip: nil,
  target: nil,
  timestamp: nil
)
  @account_email =  == nil ? "" : 
  @account_first_name =  == nil ? "" : 
  @account_id =  == nil ? "" : 
  @account_last_name =  == nil ? "" : 
  @account_tags =  == nil ? SDM::_porcelain_zero_value_tags() : 
  @authzjson = authzjson == nil ? "" : authzjson
  @capture = capture == nil ? nil : capture
  @client_ip = client_ip == nil ? "" : client_ip
  @completed_at = completed_at == nil ? nil : completed_at
  @duration = duration == nil ? nil : duration
  @egress_node_id = egress_node_id == nil ? "" : egress_node_id
  @encrypted = encrypted == nil ? false : encrypted
  @id = id == nil ? "" : id
  @identity_alias_username = identity_alias_username == nil ? "" : identity_alias_username
  @metadata_json =  == nil ? "" : 
  @query_body = query_body == nil ? "" : query_body
  @query_category = query_category == nil ? "" : query_category
  @query_hash = query_hash == nil ? "" : query_hash
  @query_key = query_key == nil ? "" : query_key
  @record_count = record_count == nil ? 0 : record_count
  @remote_identity_username = remote_identity_username == nil ? "" : remote_identity_username
  @replayable = replayable == nil ? false : replayable
  @resource_id = resource_id == nil ? "" : resource_id
  @resource_name = resource_name == nil ? "" : resource_name
  @resource_tags = resource_tags == nil ? SDM::_porcelain_zero_value_tags() : resource_tags
  @resource_type = resource_type == nil ? "" : resource_type
  @source_ip = source_ip == nil ? "" : source_ip
  @target = target == nil ? "" : target
  @timestamp = timestamp == nil ? nil : timestamp
end

Instance Attribute Details

#account_emailObject

The email of the account performing this query, at the time the query was executed. If the account email is later changed, that change will not be reflected via this field.



12572
12573
12574
# File 'lib/models/porcelain.rb', line 12572

def 
  @account_email
end

#account_first_nameObject

The given name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



12575
12576
12577
# File 'lib/models/porcelain.rb', line 12575

def 
  @account_first_name
end

#account_idObject

Unique identifier of the Account that performed the Query.



12577
12578
12579
# File 'lib/models/porcelain.rb', line 12577

def 
  @account_id
end

#account_last_nameObject

The family name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



12580
12581
12582
# File 'lib/models/porcelain.rb', line 12580

def 
  @account_last_name
end

#account_tagsObject

The tags of the account accessed, at the time the query was executed. If the account tags are later changed, that change will not be reflected via this field.



12583
12584
12585
# File 'lib/models/porcelain.rb', line 12583

def 
  @account_tags
end

#authzjsonObject

Authorization metadata associated with this query.



12585
12586
12587
# File 'lib/models/porcelain.rb', line 12585

def authzjson
  @authzjson
end

#captureObject

For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query.



12588
12589
12590
# File 'lib/models/porcelain.rb', line 12588

def capture
  @capture
end

#client_ipObject

The IP address the Query was performed from, as detected at the StrongDM control plane.



12590
12591
12592
# File 'lib/models/porcelain.rb', line 12590

def client_ip
  @client_ip
end

#completed_atObject

The time at which the Query was completed. Empty if this record indicates the start of a long-running query.



12593
12594
12595
# File 'lib/models/porcelain.rb', line 12593

def completed_at
  @completed_at
end

#durationObject

The duration of the Query.



12595
12596
12597
# File 'lib/models/porcelain.rb', line 12595

def duration
  @duration
end

#egress_node_idObject

The unique ID of the node through which the Resource was accessed.



12597
12598
12599
# File 'lib/models/porcelain.rb', line 12597

def egress_node_id
  @egress_node_id
end

#encryptedObject

Indicates that the body of the Query is encrypted.



12599
12600
12601
# File 'lib/models/porcelain.rb', line 12599

def encrypted
  @encrypted
end

#idObject

Unique identifier of the Query.



12601
12602
12603
# File 'lib/models/porcelain.rb', line 12601

def id
  @id
end

#identity_alias_usernameObject

The username of the IdentityAlias used to access the Resource.



12603
12604
12605
# File 'lib/models/porcelain.rb', line 12603

def identity_alias_username
  @identity_alias_username
end

#metadata_jsonObject

Driver specific metadata associated with this query.



12605
12606
12607
# File 'lib/models/porcelain.rb', line 12605

def 
  @metadata_json
end

#query_bodyObject

The captured content of the Query. For queries against SSH, Kubernetes, and RDP resources, this contains a JSON representation of the QueryCapture.



12608
12609
12610
# File 'lib/models/porcelain.rb', line 12608

def query_body
  @query_body
end

#query_categoryObject

The general category of Resource against which Query was performed, e.g. "web" or "cloud".



12610
12611
12612
# File 'lib/models/porcelain.rb', line 12610

def query_category
  @query_category
end

#query_hashObject

The hash of the body of the Query.



12612
12613
12614
# File 'lib/models/porcelain.rb', line 12612

def query_hash
  @query_hash
end

#query_keyObject

The symmetric key used to encrypt the body of this Query and its replay if replayable. If the Query is encrypted, this field contains an encrypted symmetric key in base64 encoding. This key must be decrypted with the organization's private key to obtain the symmetric key needed to decrypt the body. If the Query is not encrypted, this field is empty.



12617
12618
12619
# File 'lib/models/porcelain.rb', line 12617

def query_key
  @query_key
end

#record_countObject

The number of records returned by the Query, for a database Resource.



12619
12620
12621
# File 'lib/models/porcelain.rb', line 12619

def record_count
  @record_count
end

#remote_identity_usernameObject

The username of the RemoteIdentity used to access the Resource.



12621
12622
12623
# File 'lib/models/porcelain.rb', line 12621

def remote_identity_username
  @remote_identity_username
end

#replayableObject

Indicates that the Query is replayable, e.g. for some SSH or K8s sessions.



12623
12624
12625
# File 'lib/models/porcelain.rb', line 12623

def replayable
  @replayable
end

#resource_idObject

Unique identifier of the Resource against which the Query was performed.



12625
12626
12627
# File 'lib/models/porcelain.rb', line 12625

def resource_id
  @resource_id
end

#resource_nameObject

The name of the resource accessed, at the time the query was executed. If the resource is later renamed, that change will not be reflected via this field.



12628
12629
12630
# File 'lib/models/porcelain.rb', line 12628

def resource_name
  @resource_name
end

#resource_tagsObject

The tags of the resource accessed, at the time the query was executed. If the resource tags are later changed, that change will not be reflected via this field.



12631
12632
12633
# File 'lib/models/porcelain.rb', line 12631

def resource_tags
  @resource_tags
end

#resource_typeObject

The specific type of Resource against which the Query was performed, e.g. "ssh" or "postgres".



12633
12634
12635
# File 'lib/models/porcelain.rb', line 12633

def resource_type
  @resource_type
end

#source_ipObject

The IP address the Query was performed from, as detected at the ingress gateway.



12635
12636
12637
# File 'lib/models/porcelain.rb', line 12635

def source_ip
  @source_ip
end

#targetObject

The target destination of the query, in host:port format.



12637
12638
12639
# File 'lib/models/porcelain.rb', line 12637

def target
  @target
end

#timestampObject

The time at which the Query was started.



12639
12640
12641
# File 'lib/models/porcelain.rb', line 12639

def timestamp
  @timestamp
end

Instance Method Details

#to_json(options = {}) ⇒ Object



12703
12704
12705
12706
12707
12708
12709
# File 'lib/models/porcelain.rb', line 12703

def to_json(options = {})
  hash = {}
  self.instance_variables.each do |var|
    hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
  end
  hash.to_json
end