Class: SDM::Query

Inherits:
Object
  • Object
show all
Defined in:
lib/models/porcelain.rb

Overview

A Query is a record of a single client request to a resource, such as a SQL query. Longer-running queries including long-running SSH commands and SSH, RDP, or Kubernetes interactive sessions will return two Query records with the same identifier, one record at the start of the query and a second record upon the completion of the query with additional detail.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(account_email: nil, account_first_name: nil, account_id: nil, account_last_name: nil, account_tags: nil, authzjson: nil, capture: nil, client_ip: nil, completed_at: nil, duration: nil, egress_node_id: nil, encrypted: nil, id: nil, identity_alias_username: nil, metadata_json: nil, query_body: nil, query_category: nil, query_hash: nil, query_key: nil, record_count: nil, remote_identity_username: nil, replayable: nil, resource_id: nil, resource_name: nil, resource_tags: nil, resource_type: nil, source_ip: nil, target: nil, timestamp: nil) ⇒ Query

Returns a new instance of Query.



13216
13217
13218
13219
13220
13221
13222
13223
13224
13225
13226
13227
13228
13229
13230
13231
13232
13233
13234
13235
13236
13237
13238
13239
13240
13241
13242
13243
13244
13245
13246
13247
13248
13249
13250
13251
13252
13253
13254
13255
13256
13257
13258
13259
13260
13261
13262
13263
13264
13265
13266
13267
13268
13269
13270
13271
13272
13273
13274
13275
13276
# File 'lib/models/porcelain.rb', line 13216

def initialize(
  account_email: nil,
  account_first_name: nil,
  account_id: nil,
  account_last_name: nil,
  account_tags: nil,
  authzjson: nil,
  capture: nil,
  client_ip: nil,
  completed_at: nil,
  duration: nil,
  egress_node_id: nil,
  encrypted: nil,
  id: nil,
  identity_alias_username: nil,
  metadata_json: nil,
  query_body: nil,
  query_category: nil,
  query_hash: nil,
  query_key: nil,
  record_count: nil,
  remote_identity_username: nil,
  replayable: nil,
  resource_id: nil,
  resource_name: nil,
  resource_tags: nil,
  resource_type: nil,
  source_ip: nil,
  target: nil,
  timestamp: nil
)
  @account_email =  == nil ? "" : 
  @account_first_name =  == nil ? "" : 
  @account_id =  == nil ? "" : 
  @account_last_name =  == nil ? "" : 
  @account_tags =  == nil ? SDM::_porcelain_zero_value_tags() : 
  @authzjson = authzjson == nil ? "" : authzjson
  @capture = capture == nil ? nil : capture
  @client_ip = client_ip == nil ? "" : client_ip
  @completed_at = completed_at == nil ? nil : completed_at
  @duration = duration == nil ? nil : duration
  @egress_node_id = egress_node_id == nil ? "" : egress_node_id
  @encrypted = encrypted == nil ? false : encrypted
  @id = id == nil ? "" : id
  @identity_alias_username = identity_alias_username == nil ? "" : identity_alias_username
  @metadata_json =  == nil ? "" : 
  @query_body = query_body == nil ? "" : query_body
  @query_category = query_category == nil ? "" : query_category
  @query_hash = query_hash == nil ? "" : query_hash
  @query_key = query_key == nil ? "" : query_key
  @record_count = record_count == nil ? 0 : record_count
  @remote_identity_username = remote_identity_username == nil ? "" : remote_identity_username
  @replayable = replayable == nil ? false : replayable
  @resource_id = resource_id == nil ? "" : resource_id
  @resource_name = resource_name == nil ? "" : resource_name
  @resource_tags = resource_tags == nil ? SDM::_porcelain_zero_value_tags() : resource_tags
  @resource_type = resource_type == nil ? "" : resource_type
  @source_ip = source_ip == nil ? "" : source_ip
  @target = target == nil ? "" : target
  @timestamp = timestamp == nil ? nil : timestamp
end

Instance Attribute Details

#account_emailObject

The email of the account performing this query, at the time the query was executed. If the account email is later changed, that change will not be reflected via this field.



13147
13148
13149
# File 'lib/models/porcelain.rb', line 13147

def 
  @account_email
end

#account_first_nameObject

The given name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



13150
13151
13152
# File 'lib/models/porcelain.rb', line 13150

def 
  @account_first_name
end

#account_idObject

Unique identifier of the Account that performed the Query.



13152
13153
13154
# File 'lib/models/porcelain.rb', line 13152

def 
  @account_id
end

#account_last_nameObject

The family name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



13155
13156
13157
# File 'lib/models/porcelain.rb', line 13155

def 
  @account_last_name
end

#account_tagsObject

The tags of the account accessed, at the time the query was executed. If the account tags are later changed, that change will not be reflected via this field.



13158
13159
13160
# File 'lib/models/porcelain.rb', line 13158

def 
  @account_tags
end

#authzjsonObject

Authorization metadata associated with this query.



13160
13161
13162
# File 'lib/models/porcelain.rb', line 13160

def authzjson
  @authzjson
end

#captureObject

For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query.



13163
13164
13165
# File 'lib/models/porcelain.rb', line 13163

def capture
  @capture
end

#client_ipObject

The IP address the Query was performed from, as detected at the StrongDM control plane.



13165
13166
13167
# File 'lib/models/porcelain.rb', line 13165

def client_ip
  @client_ip
end

#completed_atObject

The time at which the Query was completed. Empty if this record indicates the start of a long-running query.



13168
13169
13170
# File 'lib/models/porcelain.rb', line 13168

def completed_at
  @completed_at
end

#durationObject

The duration of the Query.



13170
13171
13172
# File 'lib/models/porcelain.rb', line 13170

def duration
  @duration
end

#egress_node_idObject

The unique ID of the node through which the Resource was accessed.



13172
13173
13174
# File 'lib/models/porcelain.rb', line 13172

def egress_node_id
  @egress_node_id
end

#encryptedObject

Indicates that the body of the Query is encrypted.



13174
13175
13176
# File 'lib/models/porcelain.rb', line 13174

def encrypted
  @encrypted
end

#idObject

Unique identifier of the Query.



13176
13177
13178
# File 'lib/models/porcelain.rb', line 13176

def id
  @id
end

#identity_alias_usernameObject

The username of the IdentityAlias used to access the Resource.



13178
13179
13180
# File 'lib/models/porcelain.rb', line 13178

def identity_alias_username
  @identity_alias_username
end

#metadata_jsonObject

Driver specific metadata associated with this query.



13180
13181
13182
# File 'lib/models/porcelain.rb', line 13180

def 
  @metadata_json
end

#query_bodyObject

The captured content of the Query. For queries against SSH, Kubernetes, and RDP resources, this contains a JSON representation of the QueryCapture.



13183
13184
13185
# File 'lib/models/porcelain.rb', line 13183

def query_body
  @query_body
end

#query_categoryObject

The general category of Resource against which Query was performed, e.g. "web" or "cloud".



13185
13186
13187
# File 'lib/models/porcelain.rb', line 13185

def query_category
  @query_category
end

#query_hashObject

The hash of the body of the Query.



13187
13188
13189
# File 'lib/models/porcelain.rb', line 13187

def query_hash
  @query_hash
end

#query_keyObject

The symmetric key used to encrypt the body of this Query and its replay if replayable. If the Query is encrypted, this field contains an encrypted symmetric key in base64 encoding. This key must be decrypted with the organization's private key to obtain the symmetric key needed to decrypt the body. If the Query is not encrypted, this field is empty.



13192
13193
13194
# File 'lib/models/porcelain.rb', line 13192

def query_key
  @query_key
end

#record_countObject

The number of records returned by the Query, for a database Resource.



13194
13195
13196
# File 'lib/models/porcelain.rb', line 13194

def record_count
  @record_count
end

#remote_identity_usernameObject

The username of the RemoteIdentity used to access the Resource.



13196
13197
13198
# File 'lib/models/porcelain.rb', line 13196

def remote_identity_username
  @remote_identity_username
end

#replayableObject

Indicates that the Query is replayable, e.g. for some SSH or K8s sessions.



13198
13199
13200
# File 'lib/models/porcelain.rb', line 13198

def replayable
  @replayable
end

#resource_idObject

Unique identifier of the Resource against which the Query was performed.



13200
13201
13202
# File 'lib/models/porcelain.rb', line 13200

def resource_id
  @resource_id
end

#resource_nameObject

The name of the resource accessed, at the time the query was executed. If the resource is later renamed, that change will not be reflected via this field.



13203
13204
13205
# File 'lib/models/porcelain.rb', line 13203

def resource_name
  @resource_name
end

#resource_tagsObject

The tags of the resource accessed, at the time the query was executed. If the resource tags are later changed, that change will not be reflected via this field.



13206
13207
13208
# File 'lib/models/porcelain.rb', line 13206

def resource_tags
  @resource_tags
end

#resource_typeObject

The specific type of Resource against which the Query was performed, e.g. "ssh" or "postgres".



13208
13209
13210
# File 'lib/models/porcelain.rb', line 13208

def resource_type
  @resource_type
end

#source_ipObject

The IP address the Query was performed from, as detected at the ingress gateway.



13210
13211
13212
# File 'lib/models/porcelain.rb', line 13210

def source_ip
  @source_ip
end

#targetObject

The target destination of the query, in host:port format.



13212
13213
13214
# File 'lib/models/porcelain.rb', line 13212

def target
  @target
end

#timestampObject

The time at which the Query was started.



13214
13215
13216
# File 'lib/models/porcelain.rb', line 13214

def timestamp
  @timestamp
end

Instance Method Details

#to_json(options = {}) ⇒ Object



13278
13279
13280
13281
13282
13283
13284
# File 'lib/models/porcelain.rb', line 13278

def to_json(options = {})
  hash = {}
  self.instance_variables.each do |var|
    hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
  end
  hash.to_json
end