{"id":1803,"date":"2013-09-07T09:31:03","date_gmt":"2013-09-07T08:31:03","guid":{"rendered":"http:\/\/mccltd.net\/blog\/?p=1803"},"modified":"2013-09-07T09:56:32","modified_gmt":"2013-09-07T08:56:32","slug":"cisco-eem-applet-to-measure-cpu-utilisation","status":"publish","type":"post","link":"http:\/\/darenmatthews.com\/blog\/?p=1803","title":{"rendered":"Cisco EEM Applet – Measure CPU Utilisation"},"content":{"rendered":"

This EEM applet reads the Cisco “cpmCPUTotal5sec” object variable in the CISCO-PROCESS-MIB and triggers when the threshold exceeds 60 %.\u00a0 Three files are stored on the flash, containing the output of the CLI command “show process cpu | sorted” and “show ip traffic” as well as the current syslog.<\/p>\n

event manager applet CPU-HIGH
\nevent snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.3 get-type next entry-op gt entry-val 60 poll-interval 5
\naction 0.1 cli command “enable”
\naction 0.2 syslog msg “Capturing high cpu information to flash:”
\naction 0.3 cli command “term length 0”
\naction 1.1 cli command “show process cpu sorted | append flash:EEM_CPU_HIGH”
\naction 1.4 cli command “show ip traffic | append flash:EEM_CURR_TRAFFIC”
\naction 1.4 cli command “show logging | append flash:EEM_SYSLOG”
\naction 4.2 syslog msg “Removing EEM APPLET from running_config”
\naction 9.2 cli command “configure terminal”
\naction 9.3 cli command “no event manager applet CPU-HIGH”
\naction 9.4 cli command “end”
\naction 9.5 cli command “term default length”<\/p>\n

Output from the show processes CPU command on Cisco IOS Software Release 12.0(9):<\/p>\n

Router# show processes CPU<\/p>\n

CPU Utilisation for five seconds: 2%A\/1%B; one minute: 1%C; five minutes: 1%D
\nPID\u00a0 Runtime(ms)\u00a0 Invoked\u00a0 uSecs\u00a0\u00a0\u00a0 5Sec\u00a0\u00a0 1Min\u00a0\u00a0 5Min TTY Process
\n1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 164\u00a0\u00a0\u00a0 137902\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 Load Meter
\n2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 100\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 119\u00a0\u00a0\u00a0 840\u00a0\u00a0 0.57%\u00a0 0.11%\u00a0 0.02%\u00a0\u00a0 2 Virtual Exec
\n3\u00a0\u00a0\u00a0\u00a0\u00a0 468644\u00a0\u00a0\u00a0\u00a0 81652\u00a0\u00a0 5739\u00a0\u00a0 0.00%\u00a0 0.04%\u00a0 0.05%\u00a0\u00a0 0 Check heaps
\n4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 Pool Manager
\n5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 Timers
\n6\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 Serial Background
\n7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 OIR Handler
\n8\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 IPC Zone Manager
\n9\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 348\u00a0\u00a0\u00a0 689225\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 IPC Periodic Tim
\n10\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 IPC Seat Manager
\n11\u00a0\u00a0\u00a0\u00a0\u00a0 175300\u00a0\u00a0\u00a0 332916\u00a0\u00a0\u00a0 526\u00a0\u00a0 0.00%\u00a0 0.02%\u00a0 0.00%\u00a0\u00a0 0 ARP Input
\n12\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3824\u00a0\u00a0\u00a0 138903\u00a0\u00a0\u00a0\u00a0 27\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 HC Counter Timer
\n13\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 DDR Timers
\n14\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 Entity MIB API
\n15\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 SERIAL A’detect
\n16\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 Microcode Loader
\n17\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0 0.00%\u00a0 0.00%\u00a0 0.00%\u00a0\u00a0 0 IP Crashinfo Inp
\n–<snip>–<\/p>\n

Caution: When you poll SNMP variables, the CPU utilisation is affected. Continually polling at 1-second intervals can peg the CPU at 99 percent.<\/p>\n

High CPU detection using CLI:
\nRouter#sh processes cpu sorted ?<\/p>\n

1min\u00a0 Sort based on 1 minute Utilisation
\n5min\u00a0 Sort based on 5 minutes Utilisation
\n5sec\u00a0 Sort based on 5 seconds Utilisation
\n|\u00a0\u00a0\u00a0\u00a0 Output modifiers
\n<cr><\/p>\n

Router#sh processes cpu sorted 5min
\nCPU Utilisation for five seconds: 2%\/0%; one minute: 2%; five minutes: 1%
\nPID Runtime(ms)\u00a0\u00a0\u00a0\u00a0 Invoked\u00a0\u00a0\u00a0\u00a0\u00a0 uSecs\u00a0\u00a0 5Sec\u00a0\u00a0 1Min\u00a0\u00a0 5Min TTY Process
\n179\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 168\u00a0\u00a0\u00a0 28275159\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0 0.79%\u00a0 0.76%\u00a0 0.77%\u00a0\u00a0 0 HQF Shaper Backg
\n307\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 160\u00a0\u00a0\u00a0\u00a0 3529216\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0 0.23%\u00a0 0.18%\u00a0 0.16%\u00a0\u00a0 0 PPP manager
\n5\u00a0\u00a0\u00a0\u00a0\u00a0 141912\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 13430\u00a0\u00a0\u00a0\u00a0\u00a0 10566\u00a0 0.00%\u00a0 0.10%\u00a0 0.11%\u00a0\u00a0 0 Check heaps
\n308\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 248\u00a0\u00a0\u00a0\u00a0 3529216\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0 0.15%\u00a0 0.09%\u00a0 0.08%\u00a0\u00a0 0 PPP Events
\n122\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 26424\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5141\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5139\u00a0 0.39%\u00a0 0.24%\u00a0 0.06%\u00a0\u00a0 0 Exec
\n2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 36\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 22595\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1\u00a0 0.07%\u00a0 0.04%\u00a0 0.05%\u00a0\u00a0 0 Load Meter
\n180\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 44\u00a0\u00a0\u00a0\u00a0 1129318\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0 0.00%\u00a0 0.03%\u00a0 0.02%\u00a0\u00a0 0 RBSCP Background
\n312\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 16\u00a0\u00a0\u00a0\u00a0 1132266\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0 0.00%\u00a0 0.03%\u00a0 0.02%\u00a0\u00a0 0 FR Broadcast Out
\n42\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 64\u00a0\u00a0\u00a0\u00a0\u00a0 113310\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0 0.07%\u00a0 0.02%\u00a0 0.00%\u00a0\u00a0 0 Per-Second Jobs
\n65\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 28\u00a0\u00a0\u00a0\u00a0\u00a0 451871\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0 0.00%\u00a0 0.01%\u00a0 0.00%\u00a0\u00a0 0 Netclock Backgro
\n273\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1508\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 37676\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 40\u00a0 0.00%\u00a0 0.01%\u00a0 0.00%\u00a0\u00a0 0 OSPF-1 Hello<\/p>\n

Total CPU util. comprises process and interrupt percentages. These values are found on the first line of the output:
\nCPU Utilisation for five seconds: x%\/y%; one minute: a%; five minutes: b%
\nTotal CPU Utilisation: x%
\nProcess Utilisation: (x – y)%
\nInterrupt Utilisation: y%
\nProcess Utilisation is the difference between the Total and Interrupt (x and y). The one and five minute Utilisations are exponentially decayed averages (rather than an arithmetic average) therefore recent values have more influence on the calculated average.<\/p>\n

References:
\n“How to Collect CPU Utilisation on Cisco IOS Devices Using SNMP”
\nhttp:\/\/www.cisco.com\/en\/US\/tech\/tk648\/tk362\/technologies_tech_note09186a0080094a94.shtml<\/a>
\nCisco SNMP Object Navigator for OID cpmCPUTotal5sec: http:\/\/tools.cisco.com\/Support\/SNMP\/do\/BrowseOID.do?local=en&translate=Translate&objectInput=cpmCPUTotal5sec<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

This EEM applet reads the Cisco “cpmCPUTotal5sec” object variable in the CISCO-PROCESS-MIB and triggers when the threshold exceeds 60 %.\u00a0 Three files are stored on the flash, containing the output of the CLI command “show process cpu | sorted” and “show ip traffic” as well as the current syslog.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[83,67],"tags":[],"_links":{"self":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1803"}],"collection":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1803"}],"version-history":[{"count":10,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1803\/revisions"}],"predecessor-version":[{"id":1805,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1803\/revisions\/1805"}],"wp:attachment":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1803"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1803"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1803"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}