Class: SDM::Query

Inherits:
Object
  • Object
show all
Defined in:
lib/models/porcelain.rb

Overview

A Query is a record of a single client request to a resource, such as a SQL query. Longer-running queries including long-running SSH commands and SSH, RDP, or Kubernetes interactive sessions will return two Query records with the same identifier, one record at the start of the query and a second record upon the completion of the query with additional detail.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(account_email: nil, account_first_name: nil, account_id: nil, account_last_name: nil, account_tags: nil, authzjson: nil, capture: nil, client_ip: nil, completed_at: nil, duration: nil, egress_node_id: nil, encrypted: nil, id: nil, identity_alias_username: nil, metadata_json: nil, query_body: nil, query_category: nil, query_hash: nil, query_key: nil, record_count: nil, remote_identity_username: nil, replayable: nil, resource_id: nil, resource_name: nil, resource_tags: nil, resource_type: nil, source_ip: nil, target: nil, timestamp: nil) ⇒ Query

Returns a new instance of Query.



13224
13225
13226
13227
13228
13229
13230
13231
13232
13233
13234
13235
13236
13237
13238
13239
13240
13241
13242
13243
13244
13245
13246
13247
13248
13249
13250
13251
13252
13253
13254
13255
13256
13257
13258
13259
13260
13261
13262
13263
13264
13265
13266
13267
13268
13269
13270
13271
13272
13273
13274
13275
13276
13277
13278
13279
13280
13281
13282
13283
13284
# File 'lib/models/porcelain.rb', line 13224

def initialize(
  account_email: nil,
  account_first_name: nil,
  account_id: nil,
  account_last_name: nil,
  account_tags: nil,
  authzjson: nil,
  capture: nil,
  client_ip: nil,
  completed_at: nil,
  duration: nil,
  egress_node_id: nil,
  encrypted: nil,
  id: nil,
  identity_alias_username: nil,
  metadata_json: nil,
  query_body: nil,
  query_category: nil,
  query_hash: nil,
  query_key: nil,
  record_count: nil,
  remote_identity_username: nil,
  replayable: nil,
  resource_id: nil,
  resource_name: nil,
  resource_tags: nil,
  resource_type: nil,
  source_ip: nil,
  target: nil,
  timestamp: nil
)
  @account_email =  == nil ? "" : 
  @account_first_name =  == nil ? "" : 
  @account_id =  == nil ? "" : 
  @account_last_name =  == nil ? "" : 
  @account_tags =  == nil ? SDM::_porcelain_zero_value_tags() : 
  @authzjson = authzjson == nil ? "" : authzjson
  @capture = capture == nil ? nil : capture
  @client_ip = client_ip == nil ? "" : client_ip
  @completed_at = completed_at == nil ? nil : completed_at
  @duration = duration == nil ? nil : duration
  @egress_node_id = egress_node_id == nil ? "" : egress_node_id
  @encrypted = encrypted == nil ? false : encrypted
  @id = id == nil ? "" : id
  @identity_alias_username = identity_alias_username == nil ? "" : identity_alias_username
  @metadata_json =  == nil ? "" : 
  @query_body = query_body == nil ? "" : query_body
  @query_category = query_category == nil ? "" : query_category
  @query_hash = query_hash == nil ? "" : query_hash
  @query_key = query_key == nil ? "" : query_key
  @record_count = record_count == nil ? 0 : record_count
  @remote_identity_username = remote_identity_username == nil ? "" : remote_identity_username
  @replayable = replayable == nil ? false : replayable
  @resource_id = resource_id == nil ? "" : resource_id
  @resource_name = resource_name == nil ? "" : resource_name
  @resource_tags = resource_tags == nil ? SDM::_porcelain_zero_value_tags() : resource_tags
  @resource_type = resource_type == nil ? "" : resource_type
  @source_ip = source_ip == nil ? "" : source_ip
  @target = target == nil ? "" : target
  @timestamp = timestamp == nil ? nil : timestamp
end

Instance Attribute Details

#account_emailObject

The email of the account performing this query, at the time the query was executed. If the account email is later changed, that change will not be reflected via this field.



13155
13156
13157
# File 'lib/models/porcelain.rb', line 13155

def 
  @account_email
end

#account_first_nameObject

The given name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



13158
13159
13160
# File 'lib/models/porcelain.rb', line 13158

def 
  @account_first_name
end

#account_idObject

Unique identifier of the Account that performed the Query.



13160
13161
13162
# File 'lib/models/porcelain.rb', line 13160

def 
  @account_id
end

#account_last_nameObject

The family name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field.



13163
13164
13165
# File 'lib/models/porcelain.rb', line 13163

def 
  @account_last_name
end

#account_tagsObject

The tags of the account accessed, at the time the query was executed. If the account tags are later changed, that change will not be reflected via this field.



13166
13167
13168
# File 'lib/models/porcelain.rb', line 13166

def 
  @account_tags
end

#authzjsonObject

Authorization metadata associated with this query.



13168
13169
13170
# File 'lib/models/porcelain.rb', line 13168

def authzjson
  @authzjson
end

#captureObject

For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query.



13171
13172
13173
# File 'lib/models/porcelain.rb', line 13171

def capture
  @capture
end

#client_ipObject

The IP address the Query was performed from, as detected at the StrongDM control plane.



13173
13174
13175
# File 'lib/models/porcelain.rb', line 13173

def client_ip
  @client_ip
end

#completed_atObject

The time at which the Query was completed. Empty if this record indicates the start of a long-running query.



13176
13177
13178
# File 'lib/models/porcelain.rb', line 13176

def completed_at
  @completed_at
end

#durationObject

The duration of the Query.



13178
13179
13180
# File 'lib/models/porcelain.rb', line 13178

def duration
  @duration
end

#egress_node_idObject

The unique ID of the node through which the Resource was accessed.



13180
13181
13182
# File 'lib/models/porcelain.rb', line 13180

def egress_node_id
  @egress_node_id
end

#encryptedObject

Indicates that the body of the Query is encrypted.



13182
13183
13184
# File 'lib/models/porcelain.rb', line 13182

def encrypted
  @encrypted
end

#idObject

Unique identifier of the Query.



13184
13185
13186
# File 'lib/models/porcelain.rb', line 13184

def id
  @id
end

#identity_alias_usernameObject

The username of the IdentityAlias used to access the Resource.



13186
13187
13188
# File 'lib/models/porcelain.rb', line 13186

def identity_alias_username
  @identity_alias_username
end

#metadata_jsonObject

Driver specific metadata associated with this query.



13188
13189
13190
# File 'lib/models/porcelain.rb', line 13188

def 
  @metadata_json
end

#query_bodyObject

The captured content of the Query. For queries against SSH, Kubernetes, and RDP resources, this contains a JSON representation of the QueryCapture.



13191
13192
13193
# File 'lib/models/porcelain.rb', line 13191

def query_body
  @query_body
end

#query_categoryObject

The general category of Resource against which Query was performed, e.g. "web" or "cloud".



13193
13194
13195
# File 'lib/models/porcelain.rb', line 13193

def query_category
  @query_category
end

#query_hashObject

The hash of the body of the Query.



13195
13196
13197
# File 'lib/models/porcelain.rb', line 13195

def query_hash
  @query_hash
end

#query_keyObject

The symmetric key used to encrypt the body of this Query and its replay if replayable. If the Query is encrypted, this field contains an encrypted symmetric key in base64 encoding. This key must be decrypted with the organization's private key to obtain the symmetric key needed to decrypt the body. If the Query is not encrypted, this field is empty.



13200
13201
13202
# File 'lib/models/porcelain.rb', line 13200

def query_key
  @query_key
end

#record_countObject

The number of records returned by the Query, for a database Resource.



13202
13203
13204
# File 'lib/models/porcelain.rb', line 13202

def record_count
  @record_count
end

#remote_identity_usernameObject

The username of the RemoteIdentity used to access the Resource.



13204
13205
13206
# File 'lib/models/porcelain.rb', line 13204

def remote_identity_username
  @remote_identity_username
end

#replayableObject

Indicates that the Query is replayable, e.g. for some SSH or K8s sessions.



13206
13207
13208
# File 'lib/models/porcelain.rb', line 13206

def replayable
  @replayable
end

#resource_idObject

Unique identifier of the Resource against which the Query was performed.



13208
13209
13210
# File 'lib/models/porcelain.rb', line 13208

def resource_id
  @resource_id
end

#resource_nameObject

The name of the resource accessed, at the time the query was executed. If the resource is later renamed, that change will not be reflected via this field.



13211
13212
13213
# File 'lib/models/porcelain.rb', line 13211

def resource_name
  @resource_name
end

#resource_tagsObject

The tags of the resource accessed, at the time the query was executed. If the resource tags are later changed, that change will not be reflected via this field.



13214
13215
13216
# File 'lib/models/porcelain.rb', line 13214

def resource_tags
  @resource_tags
end

#resource_typeObject

The specific type of Resource against which the Query was performed, e.g. "ssh" or "postgres".



13216
13217
13218
# File 'lib/models/porcelain.rb', line 13216

def resource_type
  @resource_type
end

#source_ipObject

The IP address the Query was performed from, as detected at the ingress gateway.



13218
13219
13220
# File 'lib/models/porcelain.rb', line 13218

def source_ip
  @source_ip
end

#targetObject

The target destination of the query, in host:port format.



13220
13221
13222
# File 'lib/models/porcelain.rb', line 13220

def target
  @target
end

#timestampObject

The time at which the Query was started.



13222
13223
13224
# File 'lib/models/porcelain.rb', line 13222

def timestamp
  @timestamp
end

Instance Method Details

#to_json(options = {}) ⇒ Object



13286
13287
13288
13289
13290
13291
13292
# File 'lib/models/porcelain.rb', line 13286

def to_json(options = {})
  hash = {}
  self.instance_variables.each do |var|
    hash[var.id2name.delete_prefix("@")] = self.instance_variable_get var
  end
  hash.to_json
end