DM6探针安装部署一、安装包上传上传探针安装包和trial.key并解压unzip DM6数据库安全监视软件v2.1-release-20230426.zip二、创建探针安装目录并拷贝文件将安装包及trial.key拷贝到/home/dmdba/dmaget/bin下–安装包包含两个目录DMKafkaIniCreater和其中DMKafkaIniCreater为加密目录用于生成加密配置文件DM7KafkaInspector为程序执行目录为方便操作我们将两个文件夹合二为一。mkdir-p/home/dmdba/dmagent/bincd/root/DM6数据库安全监视软件v2.1-release-20230426cp-rf DMKafkaIniCreater/*/home/dmdba/dmagent/bin/cp-rf DM6KafkaInspector/*/home/dmdba/dmagent/bin/cp/root/trial.key/home/dmdba/dmagent/bin/三、执行预处理脚本管理工具,先创建代理环境后执行预处理脚本SETCURRENTDATABASESYSTEM;CREATETABLESYSDBA.MONITOR_DDL_SQL(IDBIGINTIDENTITY(1,1),OP_TYPEVARCHAR(32),OBJ_DBNAMEVARCHAR(128),OBJ_SCHNAMEVARCHAR(128),OBJ_NAMEVARCHAR(128),OBJ_TYPEVARCHAR(128),OP_SQLVARCHAR(4096),OP_TIMEDATETIME,OP_USERVARCHAR(128),OP_USER_IPVARCHAR(128));--生成权限的触发器CREATEORREPLACETRIGGERSYSDBA.MONITOR_DDL_TRIGGER_GR BEFOREGRANTORREVOKEONDATABASEDECLAREOP_IPVARCHAR(128):NULL;BEGINIFEXISTS(SELECTUSER_IPFROMSYSTEM.SYSDBA.V$SESSIONWHERESADDRSESSID())THENSELECTUSER_IPINTOOP_IPFROMSYSTEM.SYSDBA.V$SESSIONWHERESADDRSESSID();ENDIF;INSERTINTOSYSDBA.MONITOR_DDL_SQL(OP_TYPE,OBJ_DBNAME,OBJ_SCHNAME,OBJ_NAME,OBJ_TYPE,OP_SQL,OP_TIME,OP_USER,OP_USER_IP)VALUES(GRANT/REVOKE,:EVENTINFO.DATABASENAME,:EVENTINFO.OPUSER,:EVENTINFO.GRANTEE,:EVENTINFO.GRANTTYPE,CUR_SQL_STR(),:EVENTINFO.OPTIME,USER(),OP_IP);EXCEPTIONWHENOTHERSTHENNULL;END;/CREATEORREPLACETRIGGERSYSDBA.MONITOR_DDL_TRIGGER_BA BEFORECREATEORALTERORDROPORTRUNCATEONDATABASEDECLARETBL_IDINT:NULL;IDX_IDINT:NULL;OP_IPVARCHAR(128):NULL;BEGINIF:EVENTINFO.OBJECTTYPEDATABASETHENRETURN;ENDIF;IF:EVENTINFO.OBJECTNAMELIKEDMHS_DDL%THENRETURN;ENDIF;IFEXISTS(SELECTUSER_IPFROMSYSTEM.SYSDBA.V$SESSIONWHERESADDRSESSID())THENSELECTUSER_IPINTOOP_IPFROMSYSTEM.SYSDBA.V$SESSIONWHERESADDRSESSID();ENDIF;INSERTINTOSYSDBA.MONITOR_DDL_SQL(OP_TYPE,OBJ_DBNAME,OBJ_SCHNAME,OBJ_NAME,OBJ_TYPE,OP_SQL,OP_TIME,OP_USER,OP_USER_IP)VALUES(:EVENTINFO.OPTYPE,:EVENTINFO.DATABASENAME,:EVENTINFO.SCHEMANAME,:EVENTINFO.OBJECTNAME,:EVENTINFO.OBJECTTYPE,CUR_SQL_STR(),:EVENTINFO.OPTIME,USER(),OP_IP);EXCEPTIONWHENOTHERSTHENNULL;END;/四、执行agent部署命令– Linux 下执行命令参考4.1.计算DM6KafkaIniCreater.jar校验编码cd/home/dmdba/dmagent/bin java-Djava.ext.dirs./lib-cp DMKafkaIniCreater.jar creater.IniCreater md5-6将md5值填入init_conf_dm6.txt并修改以下参数 CHECK_FILE./DM6KafkaInspector.jar CHECK_CODE1f45c8f3ad42d98ba74d90535373e7bf SERVER_IP172.16.1.61#数据库IP地址(请酌情设置)SERVER_PORT12345#数据库端口号(请酌情设置)SOCKET_PORT12344LOGIN_NAMESYSDBA#数据库登陆用户名(请酌情设置)LOGIN_PASSWORDSYSDBA#数据库登陆密码(请酌情设置)KAFKA_TOPICpf_database#kafka消息主题topic配置(请酌情设置)KAFKA_BROKER_LIST172.16.1.61:9092#kafka集群代理IP端口号列表(请酌情设置 格式为ip:port,ip:port)KAFKA_BROKER_LIST_CONSUMER172.16.1.61:9092#kafka集群代理IP端口号列表(请酌情设置 格式为ip:port,ip:port)KAFKA_BROKER_LIST_PRODUCER172.16.1.61:9092#kafka集群代理IP端口号列表(请酌情设置 格式为ip:port,ip:port)4.2.加密配置文件java-Djava.ext.dirs./lib-cp DMKafkaIniCreater.jar creater.IniCreater t2k-64.3. 解密配置文件java-Djava.ext.dirs./lib-cp DMKafkaIniCreater.jar creater.IniCreater k2t-6注意解密生成的文件是init_conf_dm6_temp.txt 不是init_conf_dm6.txt4.4. 执行信息监控java-Xms256M-Xmx4096M-XX:PermSize256M-XX:MaxPermSize4096M-Djava.ext.dirs./lib-cp DM6KafkaInspector.jar com.dm6.kafka.Launcherhttps://eco.dameng.com