Provisiond
The provision daemon scans nodes from requisition and import files, and from newSuspect events. The scanned nodes are then added to the database. Note that only nodes in the database are monitored by other daemons.
NewSuspect events are triggered by Discovery scans, and by trapd and syslogd if those daemons are configured to create the event.
We recommend that you use the Meridian UI to update configuration settings.
File | Description | Reload Event | Restart Required |
---|---|---|---|
provisiond-configuration.xml |
This file sets requisition definitions for defined discovery of nodes and foreign sources. |
yes |
yes |
default-foreign-source.xml |
List of detectors and policies to apply when scanning requisitioned nodes.
Does not exist by default.
Once these settings are modified using the UI, a |
no |
no |
foreign-sources/*.xml |
List of detectors and policies to apply when scanning nodes in a requisition that matches the filename. Does not exist by default. |
yes |
no |
imports/*.xml |
One file per requisition, containing the list of nodes to import for monitoring. |
yes |
no |
File | Description |
---|---|
provisiond.log |
The node provisioning processes are logged here. This also includes service detection and policy results. |
GeoIpProvisioningAdapter.log |
Logs related to the GeoIp provisioning plugin. |