新增syslog-collector-api 采集模块，通过api 方式采集天眼、微步的设备日志。

2026-09-07 15:34:17 +08:00
parent a3852fc0f9
commit 037cca32dd
53 changed files with 6358 additions and 488 deletions
@@ -0,0 +1,93 @@
+-- =====================================================================
+-- Mock 服务器功能测试配置脚本
+-- 将天眼/微步的 host_api 指向本地 Mock 接口（复用 8290 端口，路径区分）
+--
+-- 前置条件:
+--   1. application.properties 中 mock.server.enabled=true
+--   2. 应用运行在 127.0.0.1:8290（context-path=/collectorapi）
+--
+-- 采集器 host 拼接规则: host_api + 接口路径
+--   天眼: http://127.0.0.1:8290/collectorapi/mock/tianyan + /skyeye/v1/admin/auth ...
+--   微步: http://127.0.0.1:8290/collectorapi/mock/weibu   + /api/v1/log/searchBySql ...
+--
+-- 使用说明:
+--   执行本脚本前，请先恢复生产 host_api（执行恢复语句）;
+--   测试完成后务必执行"恢复生产配置"部分，避免误连生产。
+-- =====================================================================
+
+-- =====================================================================
+-- 1. 切换到本地 Mock 地址
+-- =====================================================================
+-- 天眼-主设备（101）: weblog+alarm
+UPDATE device_api_config
+   SET host_api = 'http://127.0.0.1:8290/collectorapi/mock/tianyan',
+       enabled  = 1,
+       remark   = '【功能测试】连接本地Mock,生产地址10.56.170.107',
+       update_time = SYSDATE
+ WHERE id = 101;
+
+-- 天眼-备设备（102）: weblog（启用用于并行测试）
+UPDATE device_api_config
+   SET host_api = 'http://127.0.0.1:8290/collectorapi/mock/tianyan',
+       enabled  = 1,
+       remark   = '【功能测试】连接本地Mock,生产地址10.56.170.107',
+       update_time = SYSDATE
+ WHERE id = 102;
+
+-- 微步-TDP（103）: attack+info
+UPDATE device_api_config
+   SET host_api = 'http://127.0.0.1:8290/collectorapi/mock/weibu',
+       enabled  = 1,
+       remark   = '【功能测试】连接本地Mock,生产地址10.56.171.164',
+       update_time = SYSDATE
+ WHERE id = 103;
+
+-- =====================================================================
+-- 2. 手动触发测试（执行后可手工调用，也可等待定时调度）
+--    天眼 weblog:   curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=101&dataType=weblog&minutes=60"
+--    天眼 alarm:    curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=101&dataType=alarm&minutes=60"
+--    微步 attack:   curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=103&dataType=attack&minutes=60"
+--    微步 info:     curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=103&dataType=info&minutes=60"
+--    全部类型:      curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=101&minutes=60"
+-- =====================================================================
+
+-- =====================================================================
+-- 3. 模拟异常场景（通过 Mock 接口场景参数，无需改库）
+--    天眼 csrf过期: GET "http://127.0.0.1:8290/collectorapi/mock/tianyan/skyeye/v1/analysis/log-search/list?index=weblog&offset=1&limit=100&start_time=xxx&end_time=xxx&mock_scenario=csrf_expired"
+--    天眼 空数据:   ...&mock_scenario=empty
+--    微步 签名错误: POST "http://127.0.0.1:8290/collectorapi/mock/weibu/api/v1/log/searchBySql?api_key=xxx&auth_timestamp=xxx&sign=xxx&mock_scenario=sign_error"
+-- =====================================================================
+
+-- =====================================================================
+-- 4. 恢复生产配置（测试完成后务必执行！）
+-- =====================================================================
+-- UPDATE device_api_config
+--    SET host_api = 'https://10.56.170.107',
+--        remark   = '生产环境天眼主采集器',
+--        update_time = SYSDATE
+--  WHERE id = 101;
+--
+-- UPDATE device_api_config
+--    SET host_api = 'https://10.56.170.107',
+--        remark   = '备用采集器，暂未启用',
+--        update_time = SYSDATE
+--  WHERE id = 102;
+--
+-- UPDATE device_api_config
+--    SET host_api = 'https://10.56.171.164',
+--        remark   = '生产环境微步采集器',
+--        update_time = SYSDATE
+--  WHERE id = 103;
+
+-- =====================================================================
+-- 5. 校验查询
+-- =====================================================================
+-- SELECT id, device_type, device_name, host_api, data_types, enabled, remark
+--   FROM device_api_config
+--  ORDER BY id;
+
+-- SELECT device_type, data_type, total_count, success_count, fail_count,
+--        status, error_msg, create_time
+--   FROM device_api_collect_log
+--  ORDER BY id DESC
+--  FETCH FIRST 10 ROWS ONLY;