1、新增功能探针联动处置、心跳在线检测

2、syslog-consumer模块拆分 syslog-consumer-rule模块实现日志数据消费、解析、泛化入库。

haobang-security-xdr/syslog-serve/src/main/resources/application-test.properties

@@ -1,4 +1,4 @@
-#Server Configuration
+#Server Configuration [192.168.4.26]
 server.port=8189
 server.servlet.context-path=/syslogserve
 #server.address=0.0.0.0
@@ -9,10 +9,9 @@ server.error.include-binding-errors=always
 # Syslog Server Configuration
 syslog.tcp.port=514
 syslog.udp.port=514
-syslog.max.frame.length=65536
+syslog.max.frame.length=262144
 syslog.buffer.size=1000
-
-
+syslog.sm4.generateKey=f79548ab6fa8a304fc0115e17230358a
 # APP Service Configuration
 app.service.device_id=1
 app.service.device_name=honeypot
@@ -21,19 +20,23 @@ app.service.product_name=diting
 # syslog message data_type
 app.service.data_type=json
 #采集探针ID
-app.service.device_collect_id=1
+app.service.device_collect_id=${DEVICE_COLLECT_ID:7}
+app.service.version=${APP_SERVICE_VER:V1.0.0-20260509}
 
 # kafka Configuration
-spring.kafka.producer.bootstrap-servers=192.168.4.32:9092
-spring.kafka.producer.topic =agent-syslog-topic
-
-
-
-
+spring.kafka.producer.bootstrap-servers=${KAFKA_PRODUCER_SERVERS:120.238.245.132:32718}
+spring.kafka.producer.topic =${KAFKA_PRODUCER_TOPIC:agent-syslog-topic}
+# kafka  Configuration 新增优化配置
+spring.kafka.producer.properties.retries=10
+spring.kafka.producer.properties.retry.backoff.ms=500
+spring.kafka.producer.properties.connections.max.idle.ms=600000
+spring.kafka.producer.properties.socket.keepalive.enable=true
+spring.kafka.producer.properties.request.timeout.ms=30000
+spring.kafka.producer.properties.delivery.timeout.ms=120000
 #database Configuration
-spring.datasource.url=jdbc:postgresql://192.168.4.32:5432/ecosys
-spring.datasource.username=user_eSER8N
-spring.datasource.password=password_QCYKj6
+spring.datasource.url=jdbc:postgresql://120.238.245.132:31777/ecosys
+spring.datasource.username=postgres
+spring.datasource.password=caZ2TcmXNSW8L2Ap
 spring.datasource.driver-class-name=org.postgresql.Driver
 
 # mybatis Configuration
@@ -42,10 +45,10 @@ mybatis.type-aliases-package=com.common.entity
 mybatis.configuration.map-underscore-to-camel-case=true
 
 # 生产环境缓存配置
-spring.redis.host=192.168.4.32
+spring.redis.host=localhost
 spring.redis.port=6379
 # 密码（如果没有设置密码，可以省略）
-spring.redis.password=password_QCYKj6
+spring.redis.password=
 spring.redis.database=0
 spring.redis.timeout=5000
 #spring.redis.password=${REDIS_PASSWORD:default_prod_password}
@@ -56,4 +59,26 @@ spring.redis.lettuce.pool.max-idle=10
 spring.redis.lettuce.pool.min-idle=5
 
 # 生产环境缓存时间较长
-spring.cache.redis.time-to-live=3600000
+spring.cache.redis.time-to-live=3600000
+
+# 黑名单API配置
+blacklist.api.url= https://103.43.84.11/api/v3/Objects/Blacklist
+blacklist.api.username=apt-admin103
+blacklist.api.password=C9W2xYgfc%SN1
+
+# 白名单API配置
+whitelist.api.url=https://103.43.84.11/api/v3/Policies/GlobalWhitelist
+whitelist.api.username=apt-admin103
+whitelist.api.password=C9W2xYgfc%SN1
+
+# ============================================
+# 探针联动配置
+# ============================================
+# 是否启用联动功能
+interlocking.enabled=true
+# syslog-consumer API基础URL（安全平台外网映射地址）
+interlocking.api.base-url=http://120.238.245.132:32720/xdrservice/interlocking
+# API-KEY认证（32位，需与syslog-consumer配置一致）
+interlocking.api-key=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6
+# 定时任务执行间隔（毫秒），默认30秒
+interlocking.schedule.interval=30000