AnsweredAssumed Answered

Available License Count?

Question asked by TIFFANY IRELAND on Jul 18, 2018
Latest reply on Jan 10, 2019 by David Pala

Like • Show 0 Likes0
Comment • 5

Hello!

Is there a table in the database that lists the AVAILABLE license count, NOT the licensed users? (I've read the KB on the accurate active license count here:000030005 - How to get an accurate active user license count in RSA Authentication Manager 8.1 using SQL )

We are looking to connect our database to Tableau for metrics reporting, and would like to display an "available licenses vs licensed users" count on that dashboard. I've figured out how to query all of the other metrics we'd like, except for this available license count field - (if it's even available).

So any help would be appreciated!

Edward Bayley Sep 21, 2018 12:23 PM

Correct Answer

You're very welcome, Tiffany! Just one wrinkle I have since found... I've just implemented this in our production Auth Mgr instance, only to find that the OID with the license count is .1.3.6.1.4.1.2197.20.24.1.2.527, not .1.3.6.1.4.1.2197.20.24.1.2.526! So the OID for license consumption is clearly a 'movable feast', so you'll either need an 'if... else' clause in your code to select the correct OID depending on whether you're running your script in your Prod or Dev environment, or else run the following command:

snmpwalk -v 3 -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname}.1.3.6.1.4.1.2197 | grep ims.license.active_user_count

This returns something like:

SNMPv2-SMI::enterprises.2197.20.24.1.1.527 = STRING: "ims.license.active_user_count"

The last number in the partial OID shows you where to look for the license count, in this case it will be .1.3.6.1.4.1.2197.20.24.1.2.527 (because of the final 527 in the output above).

See the reply in context

No one else had this question

Outcomes

Edward Davis

Jul 18, 2018 12:13 PM

In PSQL I am not sure, but it is easy with snmpv3 gets.

Poll the License Strategies Table (.rsa.ims.strategyTable)

.1.3.6.1.4.1.2197.20.20 shows this table including max possible users on license [not actual users].

.1.3.6.1.4.1.2197.30.5.1 would give the total current active users (all active users = tokens+oda+rba)

Actions

Edward Bayley Sep 14, 2018 1:58 PM

Great question, and it's just come up in my organization too. The OIDs above don't work for me (I am running Auth Mgr 8.2), seems that the total number of licenses and the number of used licenses are available through different OIDs. Obviously the number of remaining available license is total licenses - used licenses.

The following snmpget commands worked for me:

Total Number of Licenses (i.e. Used + Available)

snmpget -v 3 -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname} .1.3.6.1.4.1.2197.20.20.1.7.2

where 'hostname' is the hostname of your Primary Auth Mgr server (or any Replica) and the other parameters are configured in the Security Console 'Network Monitoring (SNMP)' link under 'Advanced Settings'. (The settings are also visible in /etc/snmp/snmpd.conf).

Number of Used Licenses

snmpget -v 3 -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname} .1.3.6.1.4.1.2197.20.24.1.2.526

I also found this command useful to list every single value and establish every OID available:

snmpwalk -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname} .1.3.6.1.4.1.2197

Actions

TIFFANY IRELAND @ Edward Bayley on Sep 17, 2018 10:03 AM

Thank you for this info, Edward. I really appreciate the help!

Actions

Edward Bayley @ TIFFANY IRELAND on Sep 21, 2018 12:23 PM

This returns something like:

SNMPv2-SMI::enterprises.2197.20.24.1.1.527 = STRING: "ims.license.active_user_count"

The last number in the partial OID shows you where to look for the license count, in this case it will be .1.3.6.1.4.1.2197.20.24.1.2.527 (because of the final 527 in the output above).

Actions

David Pala Jan 10, 2019 4:08 AM

As a dynamic get of the license count, you should proceed this way using BASH :

totalLicense=xxx <= PUT HERE THE LICENSE COUNT YOU BOUGHT FROM RSA

                licenseOID=`$SNMPWALK -v 3 -u $COMM $HOST .1.3.6.1.4.1.2197.20.24.1.1 | grep -i active_user_count | cut -d' ' -f1 | rev | cut -d'.' -f1 | rev`
                RESULT=$?
                if [ $RESULT -ne 0 ]; then
                        exit 3
                fi
                usedLicense=`$SNMPGET -v 3 -u $COMM $HOST .1.3.6.1.4.1.2197.20.24.1.2.$licenseOID | sed 's/"//g'`
                warnCount=$((totalLicense*85/100))
                critCount=$((totalLicense*90/100))
                OUTPUT="Consommation licence: $usedLicense / $totalLicense|'usedLicense'=$usedLicense;$warnCount;$critCount;0;$totalLicense"
                PERFDATA=1
                if [ $usedLicense -gt $critCount ]; then
                        echo "[CRITICAL] $OUTPUT"
                        exit 2
                elif [ $usedLicense -gt $warnCount ]; then
                        echo "[WARNING] $OUTPUT"
                        exit 1

echo "$OUTPUT"

exit 0

Actions

5 Replies

Edward Davis Jul 18, 2018 12:13 PM
Mark Correct
Correct Answer
In PSQL I am not sure, but it is easy with snmpv3 gets.

Poll the License Strategies Table (.rsa.ims.strategyTable)
.1.3.6.1.4.1.2197.20.20 shows this table including max possible users on license [not actual users].

.1.3.6.1.4.1.2197.30.5.1 would give the total current active users (all active users = tokens+oda+rba)
Like • Show 1 Like1
Actions
Edward Bayley Sep 14, 2018 1:58 PM
Mark Correct
Correct Answer
Great question, and it's just come up in my organization too. The OIDs above don't work for me (I am running Auth Mgr 8.2), seems that the total number of licenses and the number of used licenses are available through different OIDs. Obviously the number of remaining available license is total licenses - used licenses.

The following snmpget commands worked for me:

Total Number of Licenses (i.e. Used + Available)

snmpget -v 3 -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname} .1.3.6.1.4.1.2197.20.20.1.7.2

where 'hostname' is the hostname of your Primary Auth Mgr server (or any Replica) and the other parameters are configured in the Security Console 'Network Monitoring (SNMP)' link under 'Advanced Settings'. (The settings are also visible in /etc/snmp/snmpd.conf).

Number of Used Licenses

snmpget -v 3 -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname} .1.3.6.1.4.1.2197.20.24.1.2.526

I also found this command useful to list every single value and establish every OID available:

snmpwalk -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname} .1.3.6.1.4.1.2197
Like • Show 2 Likes2
Actions
- TIFFANY IRELAND @ Edward Bayley on Sep 17, 2018 10:03 AM
  Mark Correct
  Correct Answer
  Thank you for this info, Edward. I really appreciate the help!
  Like • Show 0 Likes0
  Actions
  - Edward Bayley @ TIFFANY IRELAND on Sep 21, 2018 12:23 PM
    Unmark Correct
    Correct Answer
    You're very welcome, Tiffany! Just one wrinkle I have since found... I've just implemented this in our production Auth Mgr instance, only to find that the OID with the license count is .1.3.6.1.4.1.2197.20.24.1.2.527, not .1.3.6.1.4.1.2197.20.24.1.2.526! So the OID for license consumption is clearly a 'movable feast', so you'll either need an 'if... else' clause in your code to select the correct OID depending on whether you're running your script in your Prod or Dev environment, or else run the following command:
    
    snmpwalk -v 3 -u {user name} -l {security level} -a {authentication protocol} -A {authentication password} -x {privacy protocol} -X {privacy password} {hostname}.1.3.6.1.4.1.2197 | grep ims.license.active_user_count
    
    This returns something like:
    
    SNMPv2-SMI::enterprises.2197.20.24.1.1.527 = STRING: "ims.license.active_user_count"
    
    The last number in the partial OID shows you where to look for the license count, in this case it will be .1.3.6.1.4.1.2197.20.24.1.2.527 (because of the final 527 in the output above).
    Like • Show 1 Like1
    Actions
David Pala Jan 10, 2019 4:08 AM
Mark Correct
Correct Answer
As a dynamic get of the license count, you should proceed this way using BASH :

                totalLicense=xxx    <= PUT HERE THE LICENSE COUNT YOU BOUGHT FROM RSA

                licenseOID=`$SNMPWALK -v 3 -u $COMM $HOST .1.3.6.1.4.1.2197.20.24.1.1 | grep -i active_user_count | cut -d' ' -f1 | rev | cut -d'.' -f1 | rev`
                RESULT=$?
                if [ $RESULT -ne 0 ]; then
                        exit 3
                fi
                usedLicense=`$SNMPGET -v 3 -u $COMM $HOST .1.3.6.1.4.1.2197.20.24.1.2.$licenseOID | sed 's/"//g'`
                warnCount=$((totalLicense*85/100))
                critCount=$((totalLicense*90/100))
                OUTPUT="Consommation licence: $usedLicense / $totalLicense|'usedLicense'=$usedLicense;$warnCount;$critCount;0;$totalLicense"
                PERFDATA=1
                if [ $usedLicense -gt $critCount ]; then
                        echo "[CRITICAL] $OUTPUT"
                        exit 2
                elif [ $usedLicense -gt $warnCount ]; then
                        echo "[WARNING] $OUTPUT"
                        exit 1
                 fi
                 echo "$OUTPUT"
                 exit 0
Like • Show 0 Likes0
Actions

Available License Count?

Outcomes

Related Content

Recommended Content