ilogtail-1.1.1.tar.gz 测试资源

{ "inputs": [ { "type": "metric_host_heartbeat", "detail": { "intervalMs": 10000 } }, { "type": "metric_input_host_info", "detail": { "interval": 86400000 } }, { "type": "metric_input_host_os_status", "detail": { "interval": 60000 } }, { "type": "metric_host_network", "detail": { "intervalMs": 60000 } }, { "type": "metric_host_arp", "detail": { "intervalMs": 60000 } }, { "type": "metric_host_process", "detail": { "intervalMs": 60000 } }, { "type": "service_syslog", "detail": { "Address": "udp://127.0.0.1:9009" } }, { "type": "service_input_host_file_completion", "detail": { "files": [ "/proc/scsi", "/bin", "/boot", "/dev", "/lib", "/root", "/usr" ] } }, { "type": "metric_service_availability", "detail": { "services": [ { "name": "nacos", "urls": [ "http://172.17.2.41:8848/nacos", "http://172.17.2.25:8848/nacos" ] } ] } }, { "type": "metric_database_info", "detail": { "type": "oracle", "url": "172.17.2.28:1521/helowin", "username": "test", "password": "test", "connectThreshold": 0.8, "tableLockThreshold": 100, "tableSpaceThreshold": 0.8 } } ], "processors": [ { "type": "processor_add_host_common_fields" }, { "type": "processor_host_warning_handler", "detail": { "warningThreshold": { "cpu": "use_rate > 80", "memory": "use_rate > 80", "default": "use_rate > 90", "c": "use_rate > 90", "disk": "use_rate > 80", "network_up": "use_rate > 200", "network_down": "use_rate > 200" }, "fileCheck": { "CREATE": { "usb-storage": { "Indicator": "host_usb_access", "IndicatorDesc": "USB设备接入", "Category": "移动存储介质", "CategorySubtype": "介质接入", "Level": "3", "EventId": "", "EventName": "USB设备接入：" } }, "WRITE": { }, "REMOVE": { "usb-storage": { "Indicator": "host_usb_remove", "IndicatorDesc": "USB设备拔出", "Category": "移动存储介质", "CategorySubtype": "介质接入", "Level": "3", "EventId": "", "EventName": "USB设备拔出：" } }, "RENAME": { }, "CHMOD": { } }, "rsyslog": { "crontab": { "Indicator": "test indicator", "IndicatorDesc": "test indicator desc", "Category": "test category", "CategorySubtype": "test category subtype", "Level": "test level", "EventId": "test event id", "EventName": "test event name", "Action": "test action", "Result": "test result" }, "USB disconnect": { "Indicator": "host_usb_remove", "IndicatorDesc": "USB设备拔出", "Category": "移动存储介质", "CategorySubtype": "介质移除", "Level": "3", "EventId": "", "EventName": "USB设备拔出：" }, "usb-storage": { "Indicator": "host_usb_access", "IndicatorDesc": "USB设备接入", "Category": "移动存储介质", "CategorySubtype": "介质接入", "Level": "3", "EventId": "", "EventName": "USB设备接入：" }, "Mounted": { "Indicator": "host_usb_mount", "IndicatorDesc": "USB设备挂载", "Category": "移动存储介质", "CategorySubtype": "介质接入", "Level": "4", "EventId": "", "EventName": "USB设备挂载" }, "Unmounting": { "Indicator": "host_usb_umount", "IndicatorDesc": "USB设备卸载", "Category": "移动存储介质", "CategorySubtype": "介质接入", "Level": "4", "EventId": "", "EventName": "USB设备挂载" }, "Stopped firewalld": { "Indicator": "host_firewall_off", "IndicatorDesc": "防火墙关闭", "Category": "操作记录", "CategorySubtype": "防火墙关闭", "Level": "3", "EventId": "", "EventName": "防火墙关闭" }, "sudo": { "Indicator": "host_account_root", "IndicatorDesc": "提高账号权限", "Category": "操作记录", "CategorySubtype": "提权操作", "Level": "4", "EventId": "", "EventName": "提高账号权限" }, "new user": { "Indicator": "host_account_create", "IndicatorDesc": "后门账号创建", "Category": "操作记录", "CategorySubtype": "后门账号", "Level": "3", "EventId": "", "EventName": "后门账号创建：" }, "userdel": { "Indicator": "host_account_delete", "IndicatorDesc": "账号删除", "Category": "操作记录", "CategorySubtype": "删除账号", "Level": "3", "EventId": "", "EventName": "删除账号" }, "ssh2": { "Indicator": "host_remote_login", "IndicatorDesc": "远程登录", "Category": "操作记录", "CategorySubtype": "登录登出", "Level": "3", "EventId": "", "EventName": "远程登录" } } } } ], "flushers": [ { "type": "flusher_kafka", "detail": { "brokers": [ "172.17.2.41:9092" ], "topic": "ilogtail_linux" } } ] }