Skip to main content
How-To

Using an antivirus on a Centreon Infra Monitoring server

  • December 11, 2025
  • 1 reply
  • 94 views
fgbetokpanou
Centreonian
Forum|alt.badge.img+11

  

Please note that the only procedures supported and maintained by Centreon are those published in the official documentation. If you have a question about this article, post it in the comments.

This article applies if you are using antivirus/EDR software to scan a Centreon Infra Monitoring platform (central server, remote server, poller, MAP or MBI server). This includes Business modules.

Here is the list of services & directories that should be excluded from antivirus analysis.


Services to be excluded:

  • centengine
  • cbd
  • centreontrapd
  • gorgoned
  • php-fpm
  • httpd


Directories to be excluded:

  • /etc/centreon*

  • /var/log/centreon*

  • /var/lib/centreon*

  • /var/cache/centreon*

  • /usr/share/centreon*

  • /var/spool/centreon*

  • /var/lib/mysql

Here to help you enjoy your experience on The Watch ¯\_ (ツ) _/¯

    1 reply

    sdouce
    Forum|alt.badge.img+12
    • sdouce
    • Builder **
    • March 3, 2026

    Hi Fabrice,

    Thanks for the clarification and for the detailed list of exclusions.

    Would it be possible to add this information as a dedicated section or entry in the official Centreon documentation?
    For some customers, antivirus/EDR exclusions are required as an editor prerequisite to ensure proper Centreon operation, and having this clearly documented would really help during deployments and audits.

    In the same context, should we also consider documenting additional exclusions, such as:

    • Plugin directories

    • Related services and processes (for example MariaDB)

    • Specific connectors (AS400, VMware, Perl-based connectors, etc.)

    This would help avoid ambiguity and ensure consistent configurations across customer environments.

    Thanks in advance for your feedback.

    Terms & ConditionsCookie settingsAccessibility statement