Sample SNMP commands

When SNMP is configured on the SOAR Platform and a monitoring server, you can use various SNMP commands to gather information.

The provided SNMP monitoring procedures are examples only. Since environments and workloads vary, you need to use your own SNMP expertise and resources to take advantage of SNMP monitoring.

Enter the following command to get information about system storage, including details about the folders specified in the snmpd.local.conf file, such as /var/log and /usr/share/co3. Replace RESILIENT_IP in each command with the IP address of the SOAR Platform.

snmptable RESILIENT_IP hrStorageTable

You can get the SOAR Platform CPU usage, as follows:

snmpwalk RESILIENT_IP hrProcessorLoad

To check how much CPU and memory are being used by a process:

Find the PID of the process, by searching for "run path”. For example, to find the PIDs for Resilient® processes, search for processes with run path that contain resilient.

snmpwalk RESILIENT_IP HOST-RESOURCES-MIB::hrSWRunPath | grep resilient

The following output is an example.

HOST-RESOURCES-MIB::hrSWRunPath.2714 = STRING: "resilient-messaging" 
HOST-RESOURCES-MIB::hrSWRunPath.2715 = STRING: "resilient-messaging" 
HOST-RESOURCES-MIB::hrSWRunPath.2866 = STRING: "resilient-email" 
HOST-RESOURCES-MIB::hrSWRunPath.2867 = STRING: "resilient-email" 
HOST-RESOURCES-MIB::hrSWRunPath.3181 = STRING: "resilient-scripting" 
HOST-RESOURCES-MIB::hrSWRunPath.3182 = STRING: "resilient-scripting" 
HOST-RESOURCES-MIB::hrSWRunPath.3244 = STRING: "resilient" 
HOST-RESOURCES-MIB::hrSWRunPath.3245 = STRING: "resilient"

The output shows two results per process. The PID of a particular process is the integer in the second line of output for that process. In the output, the following processes and PIDs are shown.

Process Name	PID	Description
`resilient-messaging`	2715	Messaging queue used by various Resilient processes to allow asynchronous inter-process communication.
`resilient-email`	2867	Retrieves inbound email.
`resilient-scripting`	3182	Runs in-product scripts.
`resilient`	3245	Resilient user interface.

In addition to the Resilient processes, the two other processes are postgres and elasticsearch, where elasticsearch is a Java™ process.

Find the CPU usage of the process with PID 3245, as follows:
```
snmpget RESILIENT_IP hrSWRunPerfCPU.3245
```
The following example output indicates that the process is using 4933 centiseconds of CPU time:
```
HOST-RESOURCES-MIB::hrSWRunPerfCPU.3245 = INTEGER: 4933
```

Find the memory usage of the process with PID 3245, as follows:

snmpget RESILIENT_IP hrSWRunPerfMem.3245

The following example shows the output:

HOST-RESOURCES-MIB::hrSWRunPerfMem.3245 = INTEGER: 1189076 KBytes