Files
ai-security-xdr/haobang-security-dm/syslog-consumer/docker-compose/docker-compose-consumer-prod.yaml
T

141 lines
5.8 KiB
YAML

# ============================================
# Syslog Consumer 部署配置
# ============================================
# 使用方法: docker-compose -f docker-compose-consumer.yaml up -d
# ============================================
version: '3.8'
services:
# ============================================
# Syslog Consumer - 数据消费服务 (平台端)
# ============================================
syslog-consumer:
build:
context: ./consumer-dm
dockerfile: Dockerfile
image: syslog-consumer-dm:v1.2.2
container_name: syslog-consumer-dm
restart: unless-stopped
environment:
# 环境配置
- SPRING_PROFILES_ACTIVE=prod
- TZ=Asia/Shanghai
# 生产环境只使用 DIRECT:事实与统计同事务写入,不再写旧 change-log/pending。
- STATS_WRITE_MODE=DIRECT
- STATS_INCREMENTAL_CAPTURE_ENABLED=false
- STATS_INCREMENTAL_PROJECTION_ENABLED=false
- STATS_INCREMENTAL_READ_ENABLED=true
- STATS_LEGACY_FULL_SCAN_ENABLED=false
- STATS_INGRESS_METADATA_ENABLED=true
- STATS_DEVICE_RECEIVE_LEGACY_SCAN_ENABLED=false
- STATS_DEVICE_RECEIVE_CHANGE_CAPTURE_ENABLED=false
# 客户确认表用途前冻结历史清理,不删除旧代码或表。
- DEVICE_RECEIVE_CLEANUP_ENABLED=false
# 数据库配置
- SPRING_DATASOURCE_URL=jdbc:dm://192.168.4.99:5237
- SPRING_DATASOURCE_USERNAME=SYSDBA
- SPRING_DATASOURCE_PASSWORD=caZ2TcmXNSW8L2Ap
- SPRING_DATASOURCE_DRIVER_CLASS_NAME=dm.jdbc.driver.DmDriver
# HikariCP 连接池配置
# Redis配置
- SPRING_REDIS_HOST=192.168.4.99
- SPRING_REDIS_PORT=6379
- SPRING_REDIS_PASSWORD=redis_GdGWte
- SPRING_REDIS_DATABASE=0
- SPRING_REDIS_TIMEOUT=2000
- SPRING_CACHE_REDIS_TIME_TO_LIVE=600000
# Kafka配置
# Kafka配置
- SPRING_KAFKA_CONSUMER_BOOTSTRAP_SERVERS=192.168.4.99:9092
- SPRING_KAFKA_CONSUMER_GROUP_ID=agent-syslog-group
- SPRING_KAFKA_CONSUMER_AUTO_OFFSET_RESET=latest
- SPRING_KAFKA_CONSUMER_ENABLE_AUTO_COMMIT=false
- SPRING_KAFKA_CONSUMER_TOPIC=agent-syslog-topic
# 当前生产不让平台端消费非活跃原始 Topic;DLT 补偿监听不受此开关影响。
- SYSLOG_RAW_CONSUMER_ENABLED=false
- SPRING_KAFKA_CONSUMER_MAX_POLL_RECORDS=200
- SPRING_KAFKA_CONSUMER_PROPERTIES_MAX_POLL_INTERVAL_MS=900000
- SPRING_KAFKA_LISTENER_ACK_MODE=manual
- SPRING_KAFKA_LISTENER_CONCURRENCY=2
- SPRING_KAFKA_LISTENER_TYPE=batch
# syslog-consumer 的原始 Topic 当前非活跃;DLT 索引和回放必须指向 consumer-rule 的活跃链路。
- SYSLOG_COMPENSATION_DLT_TOPIC=agent-01-syslog-topic.DLT
- SYSLOG_COMPENSATION_REPLAY_TOPIC=agent-01-syslog-topic.REPLAY
- SYSLOG_COMPENSATION_GROUP_ID=syslog-compensation-agent-01-dlt-index
# InfluxDB配置
- INFLUXDB_URL=http://192.168.4.99:8087
- INFLUXDB_TOKEN=JsUyvU8vhQEFlMM_el4Drm87fyh707IhwJNsPBucPghSdbVmdQ-UvmPcyP5NTzWxsRfEz0T51Rw4ebZUuUrmZg==
- INFLUXDB_ORG=influxdb
- INFLUXDB_BUCKET=yelangbucket
- INFLUXDB_RAW_WRITE_SCHEMA=V2
- INFLUXDB_RAW_READ_MODE=V1_V2
- INFLUXDB_RAW_V1_BUCKET=yelangbucket
- INFLUXDB_RAW_V2_BUCKET=yelangbucket_v2
- INFLUXDB_RAW_UUID_BUCKET_COUNT=4096
- INFLUXDB_RAW_LEGACY_POINT_TIME_FALLBACK_ENABLED=true
- INFLUXDB_RAW_QUERY_MAX_ROWS=10000
- INFLUXDB_RAW_QUERY_MAX_RESPONSE_BYTES=10485760
- INFLUXDB_BATCH_SIZE=1000
- INFLUXDB_FLUSH_INTERVAL=1000
- INFLUXDB_CONNECTION_TIMEOUT=30s
- INFLUXDB_CONNECTION_READ_TIMEOUT=30s
- INFLUXDB_CONNECTION_WRITE_TIMEOUT=60s
# Elasticsearch配置
- SPRING_ELASTICSEARCH_URIS=http://192.168.1.174:9200
- SPRING_ELASTICSEARCH_USERNAME=CONTAINER_NAME
- SPRING_ELASTICSEARCH_PASSWORD=t2NZCiajmdazxBrF
- SPRING_ELASTICSEARCH_CONNECTION_TIMEOUT=10s
- SPRING_ELASTICSEARCH_SOCKET_TIMEOUT=30s
# API配置
- INTERLOCKING_API_KEY=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6
- INTERLOCKING_API_BASE_URL=http://192.168.4.99:8089/xdrservice/interlocking
# 探针心跳配置
- PROBE_HEARTBEAT_ENABLED=true
- PROBE_HEARTBEAT_OFFLINE_THRESHOLD_MINUTES=10
- PROBE_STATUS_CHECK_CRON=0 */10 * * * ?
- PROBE_HEARTBEAT_TENANT_ID=000000
- PROBE_HEARTBEAT_HISTORY_KEEP_DAYS=10
- PROBE_HEARTBEAT_HISTORY_CLEANUP_ENABLED=true
- PROBE_HISTORY_CLEANUP_CRON=0 0 1 * * ?
# 告警健康检查配置
- ALARM_HEALTH_CHECK_ALARM-HOURS=4
- ALARM_HEALTH_CHECK_ALARM-VISIT-HOURS=2
- ALARM_HEALTH_CHECK_ENABLED=true
# 关联分析规则配置
- ANALYSIS_REALTIME_ENABLED=true
- ANALYSIS_REALTIME_CHECK_INTERVAL_SECONDS=10
# 关联分析规则达梦安全版子查询模式开关(默认false,生产环境达梦安全版设为true)
# true → 使用 RealtimeAnalysisEngineDm,子查询包装SQL,适配 GROUP BY 不支持自定义函数
# false → 使用 RealtimeAnalysisEngine,平铺SQL(原有行为)
- ANALYSIS_DB_DAMENG_SUBQUERY_MODE=false
# 分区表检查配置
- PARTITION_CHECK_TOMORROW_ENABLED=true
- PARTITION_CHECK_FUTURE_DAYS=7
- PARTITION_AUTO_CREATE=true
# 定时任务配置
- SPRING_TASK_SCHEDULING_POOL_SIZE=10
# 日志配置
- LOGGING_LEVEL_COM_COMMON_SCHEDULE=INFO
- LOGGING_LEVEL_COM_COMMON_SERVICE=INFO
# ETL配置
- ETL_BATCH_PAGE_SIZE=1000
- ETL_BATCH_INSERT_BATCH_SIZE=500
- ETL_SCHEDULE_CRON=0 0 2 * * ?
ports:
- "8089:8089"
volumes:
- /home/syslog/logs:/app/logs
networks:
- xdr-network
privileged: true
# ============================================
# 网络配置
# ============================================
networks:
xdr-network:
driver: bridge