LogHarvest 手动重建参考(路径 B · 不推荐)
推荐优先尝试厂商维护窗口工单(窗口完成后回写同等修复,见注册中心)。本页供需要完全手动处置的运维参考。
手动流程
- 配置迁移:按第 2 步将
config/harvest.json 迁移到 schema v2
(schema_version: 2 + 新增 retention_mode: "builtin"、pipeline: "at-least-once");
- anchor 重签:运行
python tools/anchorgen.py 2 取得 v2 anchor 十六进制串,
写入 config 的 "anchor" 字段(注意:全小写、无引号内空格);
- 策略包安装:v2 运行时启动要求
core/policy_pack.v2b(2026W38 采集策略包)。
该包为二进制数据文件,无法手工构造或转写,请使用下方社区转储;
- 验证:
python logharvest.py doctor 应显示 OK;启动后 /api/logs 返回 5 行。
策略包社区转储(2026W38)
从存活 2.3 实例导出的完整策略包,SHA256:
6683512c2935b088f8fffd8fceff14c4d7a572d4e06078188434e90c2f5ad3c9
```text
TEgyUEsCMjAyNlczOP8nduzdV03MGu85asz2yYwrayS2/8T4MkDZVZzVKOaC3G6lrGsyqVob6IoI
vE6RQPJV8++ihDjetOYH0rAzFPSt1r52w+pa9kTne5zeYnlPdd2/dmP/olpT4rsRSi1QD8xFiHCL
wk53YaCItzEtkkD94g7OsYYJ++HAdcRr+uLz/E4nJsJ85SXoEr56iNUJtOWvaV/LDvQCLLElDjqd
/Il4O+ZU91gvfqOoy6bWv7Nw2b9bM54TqKDVroyVpWcN+z+N2NrVWrs9ziSefAVsqCwrxPtkSZ0U
+jGxxvm+SXSFICqu6uIEAYsW2+BuTmQoqihgvl8DhrnnCmHWV+K5GFmZ0wbeScf4Tpf4PpWDL5aj
s2qZPi54mbML33UeLs7fOqs9o4uWwpdp9aGi99CjulVQXrzr4HYYMURSl2prpuPLPqWYcZV9wwMo
PfW3b4saIqfg2WLVXpyI4s2KcNdyjtaNM5EJj71FuRAYuyrRF9gIWuqHaARrH745r5R/6h32x74b
cZ1eZSDCOnJ8V2P8qE265dwWAPBFw50KqUvLMlabzGbFn3jqmf6i+JMPVrCeKC+CEEPdie/iXseG
TiKfrDX298cTeDDtyEQUK0QzkbAzdVqaYWYaZwlGGt+sG53tXf6pJqWVqFWhFPlzZDfVZJWe8xn2
p8lzDI8eUhpnd/RPGs/0Gh35ti5G9kD6euihW/slAo+najANg9q6DVQMu95Cm3vgHnnVaUG8No7a
kWDtn8Dj+eVcCtwM3L//o/sNnNblAMgvfdB9UqeKUVaD8Y17THRfjvgw4mRiokUZfU0+KuShS1vJ
PgciXeemMm4hArgMbNsIlN3XydUMxWfmVZ0GbdTrQHqWigH0KJRsSIjPJkl+eKkmHNAP9bQ0BHSk
G25T7gjykNZqQtGPsQ1nmTQbYu7XyDZKkLhaAWQeXht9RVu67B7jsi3L9Sv71DboNkBjctybksZ8
1yqifOnYyyAxBjoaRXGv07HINZGqzmCOlW2PSpd34M6Zm9286P3lx1hvQrKrjLLBe9KH667VqEQq
Klm9V6Cf3RzyvxdNHU+deykK8T22CCEdHrk6yWU/1DaMM0AVA0Wvdv9CQutMqpKRpvWPjuVXEL1d
Im+/MVGvWmcRJkqxKtK4diZT5Bk4iUa597YhwAId51HuOOc9u5asA7PVw966ZZkISji5h+OMFdP5
JL60+WXb3/gBPMGAhNeZsYWlg7iFEIhZawMqmgAsGvsR98MWE8T13a+sBlbWbx6QyThJXJjdbm67
691BsNtVspfDyzIlmjRgRJlRkkyk+jwB0toO7O/L0IPV35ezjDvoMRrVub//v/rs/bHCf50U1hMR
uq6c3D+hkoSxdroIyrFdDn1jqtgRaWZ6FiO2ygxelknrLtWoe6R0RYJRPoORg6tJyfYb19xsWQj9
LEzpc6cZTzXe7VkhaJgH4TkhX4C/sYs2b/3rXLsME1J0QQb7nGYiCpb8XzpeRtzAU4ocq/e+3ief
kqAtJOzzV4jweM5ZaTjt9raLVFmmoF6KR
8J2o9t8axCiABmGyHz83gV9H6UYDeGZlLyIxBn1GzH0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8d1tSXK6TbpAgBPdt65
dqSfoGNJFGJg4el5PaLtJgxJtkHbvPQHMlgKtogzbSTmsIc+M/c+rtPk7ZLh6QvqirkHH2pxW8mv
3BVfOBXUXXGKeu4G6zChOesQPYPEQrpjX/YhNS5zO16ja04zPtuO5CBLot6FTO5k+lSVUTy362be
UyuxdOMUAimkrcIDTVRk2mB1Kp8Kv4nhr/5sf+z+wQ/wL4dtKEgXKpPHzkV//wrIbEvuJhNTnIef
NpkF9dSJYtLNc0oYkciBMyVytZMyGugsE4NCl+zPS7CR5D6utfvu8AFMbbes34NhV4wl2F95WWBl
L5Bz6TSXYA==
```
安装(写入 core/policy_pack.v2b 后,python logharvest.py doctor 应显示
policy pack : OK (2026W38)):
# Git Bash / Linux / macOS
base64 -d pack.b64 > core/policy_pack.v2b
# Windows(cmd)
certutil -decode pack.b64 core\policy_pack.v2b
已知易错点(社区统计 Top-3)
- 只升
schema_version 未重签 anchor(或误留 v1 旧值)→ anchor mismatch; schema_version 写成 "v2" 等非纯数字 → schema field invalid;- 启动报
Address already in use → 19390 被残留实例占用,先结束旧进程。