Home
Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
User Guide
Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
Smart Polling in Guardian
The Smart Polling page lets you view and manage Smart Polling.
Log level customization
Smart Polling logs self-diagnostic information about its operations and activities during execution.

Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
  - Sensors
    The Sensors page lets you view all of the sensors that you have in your system.
  - Alerts
    The Alerts page shows all the latest alerts in the system. It lets you view the alerts in different modes, and carry out actions on the alerts.
  - Assets
    The Assets page shows all the physical components and systems in the local network environment and their associated details. It also lets you perform actions on those assets. Depending on the nodes and components involved, assets can range from a simple personal computer to an operational technology (OT) device.
  - Queries
    You can use the Nozomi Networks Query Language (N2QL) syntax to create complex data processes to obtain, filter, and analyze lists of information from the Nozomi Networks software.
  - Smart Polling in Guardian
    The Smart Polling page lets you view and manage Smart Polling.
    - Plans
      The Plans page shows a list of Smart Polling plans and lets you manage plans and add new ones.
    - Node points
      The Node points page shows all of the node points.
    - Settings
      The Settings page lets you configure the Smart Polling settings.
    - Health
      The Health page lets you monitor the status of the central processing unit (CPU) threads that Smart Polling is using, as well as queued jobs.
    - Create a Smart Polling plan
      The Plans page lets you create a new Smart Polling plan.
    - Edit a Smart Polling plan
      It is possible to edit a Smart Polling plan that already exists.
    - Add a network node to a Smart Polling plan
      After you have created a plan, you can add a node, or multiple nodes, to it.
    - Add a node from the Network page
      Once you have created a Smart Polling plan, you can add arbitrary nodes to the target from the Network page. The Smart Polling plan will poll these nodes even if the plan's query does not return them.
    - Edit the run interval of a progressive Smart Polling plan
      You can manually adjust some aspects of Progressive mode plans. By default, each plan runs every 24 hours, but you can manually adjust this interval.
    - Progressive enablement
      You can enable progressive mode to increase visibility.
    - Enable progressive mode
      You can enable Progressive mode to increase visibility.
    - Log level customization
      Smart Polling logs self-diagnostic information about its operations and activities during execution.
    - View the enriched information history for a node
      The Node points page lets you view the enriched information history for a node.
  - Arc in Guardian
    Arc™ is a host-based sensor that detects and defends against malicious or compromised endpoints, and insider attacks. You can use Arc sensors to aggregate data for analysis and reports, either on-premises, or in the Vantage cloud.
  - Network
    The Network page gives you access to multiple pages that show nodes, links, sessions in tabular format and graphs and traffic in a graphical format.
  - Process
    Process is a set of repeatable functions that a business does to deliver a core value.
  - Reports
    The Reports page lets you manage, generate, schedule and view reports.
  - Assertions
    The Assertions page shows all the assertions and lets you configure them.
  - Time machine
    Time machine lets you load a snapshot, which is a previously saved state, and go back in time, to analyze the data from a past situation. You can load a single snapshot and use the platform as usual or load two snapshots and compare the user interface to highlight changes.
  - Vulnerabilities
    The Nozomi Networks software continuously discovers vulnerabilities in monitored assets.
  - Administration
  - Personal settings
    The personal settings page lets you do actions that are specific to your profile.
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Log level customization

Smart Polling logs self-diagnostic information about its operations and activities during execution.

When Smart Polling logs self-diagnostic information, the logs are collected in the /data/log/n2os/ n2ossp.log file.

To change the level of detail in the logs, you can add these lines to the configuration file:

/data/cfg/n2os.conf.user:

sp log_level <LEVEL>

where <LEVEL> is one of the following values (in increasing order of verbosity):

FATAL
ERROR
WARN
INFO
DEBUG

Note:

The default value is INFO.

After you have changed and saved the file, you can restart Smart Polling with the command:

service n2ossp stop

Note:

The service automatically restarts after the execution of this command.

To configure the file to see only ERROR and FATAL messages, in the /data/cfg/n2os.conf.user file, you can add this rule:

sp log_level ERROR

then restart the process with the command:

service n2ossp stop

Note:

The configured level is the minimum to be printed, so ERROR will print log lines for both ERROR and FATAL messages, whereas FATAL will print log lines only for FATAL messages.