Package com.strongdm.api
Class Query
java.lang.Object
com.strongdm.api.Query
A Query is a record of a single client request to a resource, such as a SQL query.
Longer-running queries including long-running SSH commands and SSH, RDP, or Kubernetes
interactive sessions will return two Query records with the same identifier, one record
at the start of the query and a second record upon the completion of the query with
additional detail.
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionThe email of the account performing this query, at the time the query was executed.The given name of the account performing this query, at the time the query was executed.Unique identifier of the Account that performed the Query.The family name of the account performing this query, at the time the query was executed.The tags of the account accessed, at the time the query was executed.Authorization metadata associated with this query.For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query.The IP address the Query was performed from, as detected at the StrongDM control plane.The time at which the Query was completed.The duration of the Query.The unique ID of the node through which the Resource was accessed.boolean
Indicates that the body of the Query is encrypted.getId()
Unique identifier of the Query.The username of the IdentityAlias used to access the Resource.The captured content of the Query.The general category of Resource against which Query was performed, e.g.The hash of the body of the Query.The symmetric key used to encrypt the body of this Query and its replay if replayable.long
The number of records returned by the Query, for a database Resource.Deprecated.boolean
Indicates that the Query is replayable, e.g.Unique identifier of the Resource against which the Query was performed.The name of the resource accessed, at the time the query was executed.The tags of the resource accessed, at the time the query was executed.The specific type of Resource against which the Query was performed, e.g.The IP address the Query was performed from, as detected at the ingress gateway.The target destination of the query, in host:port format.The time at which the Query was started.void
The email of the account performing this query, at the time the query was executed.void
The given name of the account performing this query, at the time the query was executed.void
setAccountId
(String in) Unique identifier of the Account that performed the Query.void
The family name of the account performing this query, at the time the query was executed.void
setAccountTags
(Map<String, String> in) The tags of the account accessed, at the time the query was executed.void
setAuthzJson
(String in) Authorization metadata associated with this query.void
For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query.void
setClientIp
(String in) The IP address the Query was performed from, as detected at the StrongDM control plane.void
setCompletedAt
(Date in) The time at which the Query was completed.void
setDuration
(Duration in) The duration of the Query.void
The unique ID of the node through which the Resource was accessed.void
setEncrypted
(boolean in) Indicates that the body of the Query is encrypted.void
Unique identifier of the Query.void
The username of the IdentityAlias used to access the Resource.void
setQueryBody
(String in) The captured content of the Query.void
The general category of Resource against which Query was performed, e.g.void
setQueryHash
(String in) The hash of the body of the Query.void
setQueryKey
(String in) The symmetric key used to encrypt the body of this Query and its replay if replayable.void
setRecordCount
(long in) The number of records returned by the Query, for a database Resource.void
Deprecated.void
setReplayable
(boolean in) Indicates that the Query is replayable, e.g.void
setResourceId
(String in) Unique identifier of the Resource against which the Query was performed.void
The name of the resource accessed, at the time the query was executed.void
setResourceTags
(Map<String, String> in) The tags of the resource accessed, at the time the query was executed.void
The specific type of Resource against which the Query was performed, e.g.void
setSourceIp
(String in) The IP address the Query was performed from, as detected at the ingress gateway.void
The target destination of the query, in host:port format.void
setTimestamp
(Date in) The time at which the Query was started.
-
Constructor Details
-
Query
public Query()
-
-
Method Details
-
getAccountEmail
The email of the account performing this query, at the time the query was executed. If the account email is later changed, that change will not be reflected via this field. -
setAccountEmail
The email of the account performing this query, at the time the query was executed. If the account email is later changed, that change will not be reflected via this field. -
getAccountFirstName
The given name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field. -
setAccountFirstName
The given name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field. -
getAccountId
Unique identifier of the Account that performed the Query. -
setAccountId
Unique identifier of the Account that performed the Query. -
getAccountLastName
The family name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field. -
setAccountLastName
The family name of the account performing this query, at the time the query was executed. If the account is later renamed, that change will not be reflected via this field. -
getAccountTags
The tags of the account accessed, at the time the query was executed. If the account tags are later changed, that change will not be reflected via this field. -
setAccountTags
The tags of the account accessed, at the time the query was executed. If the account tags are later changed, that change will not be reflected via this field. -
getAuthzJson
Authorization metadata associated with this query. -
setAuthzJson
Authorization metadata associated with this query. -
getCapture
For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query. -
setCapture
For queries against SSH, Kubernetes, and RDP resources, this contains additional information about the captured query. -
getClientIp
The IP address the Query was performed from, as detected at the StrongDM control plane. -
setClientIp
The IP address the Query was performed from, as detected at the StrongDM control plane. -
getCompletedAt
The time at which the Query was completed. Empty if this record indicates the start of a long-running query. -
setCompletedAt
The time at which the Query was completed. Empty if this record indicates the start of a long-running query. -
getDuration
The duration of the Query. -
setDuration
The duration of the Query. -
getEgressNodeId
The unique ID of the node through which the Resource was accessed. -
setEgressNodeId
The unique ID of the node through which the Resource was accessed. -
getEncrypted
public boolean getEncrypted()Indicates that the body of the Query is encrypted. -
setEncrypted
public void setEncrypted(boolean in) Indicates that the body of the Query is encrypted. -
getId
Unique identifier of the Query. -
setId
Unique identifier of the Query. -
getIdentityAliasUsername
The username of the IdentityAlias used to access the Resource. -
setIdentityAliasUsername
The username of the IdentityAlias used to access the Resource. -
getQueryBody
The captured content of the Query. For queries against SSH, Kubernetes, and RDP resources, this contains a JSON representation of the QueryCapture. -
setQueryBody
The captured content of the Query. For queries against SSH, Kubernetes, and RDP resources, this contains a JSON representation of the QueryCapture. -
getQueryCategory
The general category of Resource against which Query was performed, e.g. "web" or "cloud". -
setQueryCategory
The general category of Resource against which Query was performed, e.g. "web" or "cloud". -
getQueryHash
The hash of the body of the Query. -
setQueryHash
The hash of the body of the Query. -
getQueryKey
The symmetric key used to encrypt the body of this Query and its replay if replayable. If the Query is encrypted, this field contains an encrypted symmetric key in base64 encoding. This key must be decrypted with the organization's private key to obtain the symmetric key needed to decrypt the body. If the Query is not encrypted, this field is empty. -
setQueryKey
The symmetric key used to encrypt the body of this Query and its replay if replayable. If the Query is encrypted, this field contains an encrypted symmetric key in base64 encoding. This key must be decrypted with the organization's private key to obtain the symmetric key needed to decrypt the body. If the Query is not encrypted, this field is empty. -
getRecordCount
public long getRecordCount()The number of records returned by the Query, for a database Resource. -
setRecordCount
public void setRecordCount(long in) The number of records returned by the Query, for a database Resource. -
getRemoteIdentityUsername
Deprecated.The username of the RemoteIdentity used to access the Resource. -
setRemoteIdentityUsername
Deprecated.The username of the RemoteIdentity used to access the Resource. -
getReplayable
public boolean getReplayable()Indicates that the Query is replayable, e.g. for some SSH or K8s sessions. -
setReplayable
public void setReplayable(boolean in) Indicates that the Query is replayable, e.g. for some SSH or K8s sessions. -
getResourceId
Unique identifier of the Resource against which the Query was performed. -
setResourceId
Unique identifier of the Resource against which the Query was performed. -
getResourceName
The name of the resource accessed, at the time the query was executed. If the resource is later renamed, that change will not be reflected via this field. -
setResourceName
The name of the resource accessed, at the time the query was executed. If the resource is later renamed, that change will not be reflected via this field. -
getResourceTags
The tags of the resource accessed, at the time the query was executed. If the resource tags are later changed, that change will not be reflected via this field. -
setResourceTags
The tags of the resource accessed, at the time the query was executed. If the resource tags are later changed, that change will not be reflected via this field. -
getResourceType
The specific type of Resource against which the Query was performed, e.g. "ssh" or "postgres". -
setResourceType
The specific type of Resource against which the Query was performed, e.g. "ssh" or "postgres". -
getSourceIp
The IP address the Query was performed from, as detected at the ingress gateway. -
setSourceIp
The IP address the Query was performed from, as detected at the ingress gateway. -
getTarget
The target destination of the query, in host:port format. -
setTarget
The target destination of the query, in host:port format. -
getTimestamp
The time at which the Query was started. -
setTimestamp
The time at which the Query was started.
-