Files
ai-security-xdr/haobang-security-dm/syslog-collector-api/sql/mock_server_test.sql
T

94 lines
4.5 KiB
SQL
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
-- =====================================================================
-- Mock 服务器功能测试配置脚本
-- 将天眼/微步的 host_api 指向本地 Mock 接口(复用 8290 端口,路径区分)
--
-- 前置条件:
-- 1. application.properties 中 mock.server.enabled=true
-- 2. 应用运行在 127.0.0.1:8290(context-path=/collectorapi)
--
-- 采集器 host 拼接规则: host_api + 接口路径
-- 天眼: http://127.0.0.1:8290/collectorapi/mock/tianyan + /skyeye/v1/admin/auth ...
-- 微步: http://127.0.0.1:8290/collectorapi/mock/weibu + /api/v1/log/searchBySql ...
--
-- 使用说明:
-- 执行本脚本前,请先恢复生产 host_api(执行恢复语句);
-- 测试完成后务必执行"恢复生产配置"部分,避免误连生产。
-- =====================================================================
-- =====================================================================
-- 1. 切换到本地 Mock 地址
-- =====================================================================
-- 天眼-主设备(101): weblog+alarm
UPDATE device_api_config
SET host_api = 'http://127.0.0.1:8290/collectorapi/mock/tianyan',
enabled = 1,
remark = '【功能测试】连接本地Mock,生产地址10.56.170.107',
update_time = SYSDATE
WHERE id = 101;
-- 天眼-备设备(102): weblog(启用用于并行测试)
UPDATE device_api_config
SET host_api = 'http://127.0.0.1:8290/collectorapi/mock/tianyan',
enabled = 1,
remark = '【功能测试】连接本地Mock,生产地址10.56.170.107',
update_time = SYSDATE
WHERE id = 102;
-- 微步-TDP(103): attack+info
UPDATE device_api_config
SET host_api = 'http://127.0.0.1:8290/collectorapi/mock/weibu',
enabled = 1,
remark = '【功能测试】连接本地Mock,生产地址10.56.171.164',
update_time = SYSDATE
WHERE id = 103;
-- =====================================================================
-- 2. 手动触发测试(执行后可手工调用,也可等待定时调度)
-- 天眼 weblog: curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=101&dataType=weblog&minutes=60"
-- 天眼 alarm: curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=101&dataType=alarm&minutes=60"
-- 微步 attack: curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=103&dataType=attack&minutes=60"
-- 微步 info: curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=103&dataType=info&minutes=60"
-- 全部类型: curl -X POST "http://127.0.0.1:8290/collectorapi/api/collect/trigger?id=101&minutes=60"
-- =====================================================================
-- =====================================================================
-- 3. 模拟异常场景(通过 Mock 接口场景参数,无需改库)
-- 天眼 csrf过期: GET "http://127.0.0.1:8290/collectorapi/mock/tianyan/skyeye/v1/analysis/log-search/list?index=weblog&offset=1&limit=100&start_time=xxx&end_time=xxx&mock_scenario=csrf_expired"
-- 天眼 空数据: ...&mock_scenario=empty
-- 微步 签名错误: POST "http://127.0.0.1:8290/collectorapi/mock/weibu/api/v1/log/searchBySql?api_key=xxx&auth_timestamp=xxx&sign=xxx&mock_scenario=sign_error"
-- =====================================================================
-- =====================================================================
-- 4. 恢复生产配置(测试完成后务必执行!)
-- =====================================================================
-- UPDATE device_api_config
-- SET host_api = 'https://10.56.170.107',
-- remark = '生产环境天眼主采集器',
-- update_time = SYSDATE
-- WHERE id = 101;
--
-- UPDATE device_api_config
-- SET host_api = 'https://10.56.170.107',
-- remark = '备用采集器,暂未启用',
-- update_time = SYSDATE
-- WHERE id = 102;
--
-- UPDATE device_api_config
-- SET host_api = 'https://10.56.171.164',
-- remark = '生产环境微步采集器',
-- update_time = SYSDATE
-- WHERE id = 103;
-- =====================================================================
-- 5. 校验查询
-- =====================================================================
-- SELECT id, device_type, device_name, host_api, data_types, enabled, remark
-- FROM device_api_config
-- ORDER BY id;
-- SELECT device_type, data_type, total_count, success_count, fail_count,
-- status, error_msg, create_time
-- FROM device_api_collect_log
-- ORDER BY id DESC
-- FETCH FIRST 10 ROWS ONLY;