Change Detection

How Knowledge Tree tracks infrastructure changes between discovery runs and surfaces them in a change feed.

How It Works

After each discovery run, Knowledge Tree compares the current state of resources against the previous snapshot. Differences are recorded aschanges in a change feed, with severity ratings and affected resource counts.

Configuration

Enable change detection in your config:

change_detection:
  enabled: true
  snapshot_interval: 15m
  retention_count: 10

Change Types

TypeDescription
createdNew resource discovered
updatedResource properties changed
deletedResource no longer present
relationship_addedNew edge between resources
relationship_removedEdge no longer exists

Change Feed API

# List recent changes
curl http://localhost:8080/api/v1/changes/

# Get change statistics
curl http://localhost:8080/api/v1/changes/stats

The change feed returns paginated results with the resource ID, change type, old and new values, and a timestamp.