安装部署

所有的安装文件都在 inlong-audit 目录下，如果使用 MySQL 存储审计数据，需要先通过sql/apache_inlong_audit.sql出生数据库。

Audit Proxy

配置 Pulsar

配置文件 conf/audit-proxy.conf.

  1. agent1.sources.tcp-source.host = 0.0.0.0
  2. agent1.sources.tcp-source.port = 10081
  3. agent1.sinks.pulsar-sink-msg1.pulsar_server_url= pulsar://PULSAR_BROKER_LIST
  4. agent1.sinks.pulsar-sink-msg1.topic = persistent://public/default/inlong-audit
  5. agent1.sinks.pulsar-sink-msg2.pulsar_server_url = pulsar://PULSAR_BROKER_LIST
  6. agent1.sinks.pulsar-sink-msg2.topic = persistent://public/default/inlong-audit

启动

  1. sh ./bin/proxy-start.sh

Audit Store

配置

配置文件 conf/application.properties.

  1. # store.server: mysql / elasticsearch 
  2. audit.config.store.mode=mysql
  3. # audit pulsar topic
  4. audit.pulsar.server.url=pulsar://127.0.0.1:6650
  5. audit.pulsar.topic=persistent://public/default/inlong-audit
  6. audit.pulsar.consumer.sub.name=sub-audit
  7. # mysql
  8. spring.datasource.druid.url=jdbc:mysql://127.0.0.1:3306/apache_inlong_audit?characterEncoding=utf8&useSSL=false&serverTimezone=GMT%2b8&rewriteBatchedStatements=true&allowMultiQueries=true&zeroDateTimeBehavior=CONVERT_TO_NULL
  9. spring.datasource.druid.username=root
  10. spring.datasource.druid.password=inlong

启动

启动脚本 ./bin/store-start.sh

  1. sh ./bin/store-start.sh

Audit Proxy 默认监听端口为 10081。