Provisiond
The provision daemon scans nodes from requisition and import files, and from newSuspect events. The scanned nodes are then added to the database. Note that only nodes in the database are monitored by other daemons.
NewSuspect events are triggered by Discovery scans, and by trapd and syslogd if those daemons are configured to create the event.
We recommend that you use the Horizon UI to update configuration settings.
File | Description | Reload Event | Restart Required |
---|---|---|---|
default-foreign-source.xml |
List of detectors and policies to apply when scanning requisitioned nodes.
Does not exist by default.
Once these settings are modified using the UI, a |
no |
no |
foreign-sources/*.xml |
List of detectors and policies to apply when scanning nodes in a requisition that matches the filename. Does not exist by default. |
yes |
no |
imports/*.xml |
One file per requisition, containing the list of nodes to import for monitoring. |
yes |
no |
File | Description |
---|---|
provisiond.log |
The node provisioning processes are logged here. This also includes service detection and policy results. |
GeoIpProvisioningAdapter.log |
Logs related to the GeoIp provisioning plugin. |