1、新增功能探针联动处置、心跳在线检测

2、syslog-consumer模块拆分 syslog-consumer-rule模块实现日志数据消费、解析、泛化入库。
2026-05-28 14:30:06 +08:00
parent 19c563b3f3
commit a360895292
1479 changed files with 116572 additions and 4549 deletions
@@ -0,0 +1,78 @@
+package com.common.entity;
+
+
+import lombok.Builder;
+import lombok.Data;
+
+import java.time.LocalDateTime;
+
+@Data
+@Builder
+public class AlarmVisit {
+    private String id;
+    private LocalDateTime createdAt;
+    private String alarmName;
+    private String alarmLevel;
+    private String alarmType;
+    private String alarmMajorType;
+    private String alarmMinorType;
+    private Integer alarmAreaId;
+    private String[] attackIp;
+    private String[] victimIp;
+    private String[] victimWebUrl;
+    private Integer[] attackChainPhase;
+    private Integer[] deviceId;
+    private String[] tag;
+    private String comment;
+    private String[] originLogIds;
+    private String queryId;
+    private Integer judgedState;
+    private Integer disposedState;
+    private String dispositionAdvice;
+    private Integer attackResult;
+    private Integer fall;
+    private byte[] payload;
+    private Integer[] operateEvent;
+    private Integer[] attackPort;
+    private Integer[] victimPort;
+    private String attackMethod;
+    private String businessExt;
+    private LocalDateTime logStartAt;
+    private LocalDateTime logEndAt;
+    private String httpStatus;
+    private String dnsInfo;
+    private String accountInfo;
+    private String attackerInfo;
+    private String victimInfo;
+    private String suspiciousAction;
+    private String vulnInfo;
+    private String weakPwd;
+    private String complianceBaseline;
+    private String fileInfo;
+    private String fileTags;
+    private String endpointInfo;
+    private String endpointProtection;
+    private String originInfo;
+    private String protocolInfo;
+    private String emailInfo;
+    private String sensitiveData;
+    private Integer hitIntelligence;
+    private String windowTime;
+    private LocalDateTime updatedAt;
+    private String engineType;
+    private String attackIpPic;
+    private String victimIpPic;
+    private LocalDateTime operationAt;
+    private String attackDirection;
+    private LocalDateTime etlTime;
+    private Integer logCount;
+    private Integer isAssetHit;
+    private Boolean focused;
+    private Boolean baseFocused;
+    private Boolean isUpdated;
+    private int alarmSource;
+    private String[] httpReqHeader;
+    private String[] httpReqBody;
+    private String[] httpRespHeader;
+    private String[] httpRespBody;
+}