Provisiond
The provision daemon scans nodes from requisition and import files, and from newSuspect
events.
The scanned nodes are then added to the database.
Note that only nodes in the database are monitored by other daemons.
newSuspect
events are generated by discovery scans.
They can also be generated by trapd and syslogd, if those daemons are configured properly.
We recommend that you use the Meridian web UI to update configuration settings.
File | Description | Reload Event | Restart Required |
---|---|---|---|
provisiond-configuration.xml |
Sets requisition definitions for defined discovery of nodes and foreign sources. |
Yes |
Yes |
default-foreign-source.xml |
List of detectors and policies to apply when scanning requisitioned nodes.
Does not exist by default. |
No |
No |
foreign-sources/*.xml |
List of detectors and policies to apply when scanning nodes in a requisition that matches the filename. Does not exist by default. |
Yes |
No |
imports/*.xml |
One file per requisition, containing the list of nodes to import for monitoring. |
Yes |
No |
File | Description |
---|---|
provisiond.log |
Log of node provisioning processes. Also includes service detection and policy results. |
GeoIpProvisioningAdapter.log |
Logs related to the GeoIP provisioning plugin. |
Provisiond thread configuration
Provisiond uses for a few thread pools to manage various tasks. You can configure these via the Web UI by selecting
in the top menu bar.Any changes to the thread pools require a restart of the Meridian service to apply the new thread limits. |
Pool | Default Size | Description |
---|---|---|
Import |
8 |
Number of threads to allocate for importing requisitions. This pool determines the number of requisitions that can be imported at one time. Increase this number if you have a large number of requisitions. |
Scan |
10 |
Number of threads to allocate for manual scan/sync requests. This pool is used for any manual sync tasks and when requesting a rescan of a single node. Increase this number if you have a large number of nodes in a single requisition. |
Rescan |
10 |
Number of threads to allocate for automated rescanning existing nodes. This pool is used for rescanning nodes in a requisition on the schedule set in the foreign source definition. This value typically should be the same as the Scan thread pool size. |
Write |
8 |
Number of threads to allocate for writing to the database. This value typically does not need to be modified under most use cases. |