6 Replies Latest reply on Jun 27, 2018 10:52 AM by rschroeder

    Create Cisco licensing report (show license)




      I'm looking for a way to create a licensing report for all of our ASAs. Same as if I'd run 'show license' on each one of them. Is there anyone here that knows an easy way to provide this type of report?


      Thanks in advance!




        • Re: Create Cisco licensing report (show license)

          A huge problem with Cisco's SNMP implementation on ASAs is that there is a great deal of data that has not been implemented in the SNMP agent despite being defined.

          Looking at my ASA running 9.2(3)4, the only useful OID I can find regarding this is (crasMaxSessionsSupportable).

          There is a ciscoLicenseMIB defined at OID, but Cisco's own SNMP object navigator reports that there are no supporting images.


          • Re: Create Cisco licensing report (show license)
            Craig Norborg

            Wow, going to use basically the same answer twice in one day, and the answer is based off something I just did the other day!   I actually had this problem the other day where I wanted to create a report to find out the licensing on a bunch of 2911's, I tried figuring out how to do a UnDP to do it, but it didn't really get me what I wanted.


            So, I did figure out that if I wanted to execute the "show license" command on all my 2900's, I could to it in the "Configs" / "Config Management" screen by doing an "Execute Script".   Now, on my 2900's the "show license" command actually worked, but on the ASA's I have access to, this command doesn't exist.  So, either your running a newer OS than us (definitely possible!) or your actually looking to do a "show activation-key".   You could just use that command, or if you just wanted the "Total VPN Peers", you could use the command "show activation-key |  i Total VPN Peers", it really depends on what you want.


            Once you've done that, all your output is stored in the database from the "Transfer" queue, so don't empty it out by clearing complete jobs or anything till you get your output.  To get your output, either use SQL or SWQL, I'll do it with SWQL below.


            SELECT NT.NodeProperties.Nodes.IPAddress, NT.NodeProperties.Nodes.SysName, NT.NodeProperties.Nodes.MachineType, NT.DeviceOutput

            FROM NCM.TransferResults NT

            WHERE (RequestedScript LIKE 'show activation-key%')


            This will output everything into a excel-like table in SWQL Studio that you can export to CSV and then into Excel.   You can clean it up first with a text editor like VI and use excel or something to put it in a format you like.



              • Re: Create Cisco licensing report (show license)

                cnorborg, I'm trying to use your process (above) to get the license information from some Cisco 4510's, and I'm missing something basic, it's not working.


                Can you show me in ridiculous baby-steps-detail how to get the data?  Maybe you can see what I'm missing.


                I want to report on the output of the "show license in-use" command only my Cisco 4510's.  The output of the command looks like this:



                (Node Name)   show license in-use

                License Store: Primary License Storage

                StoreIndex: 1 Feature: entservices  Version: 1.0

                      License Type: Permanent

                      License State: Active, In Use

                      License Count: Non-Counted

                      License Priority: Medium

                License Store: Dynamic License Storage


                I thought the process would be as follows:

                1. Admin > Alerts & Reports > Manage Reports > Create New Report
                2. Put in the pretty stuff (Report title, etc.)
                3. Select Custom Table (is this where I went wrong?  Should I have selected something else?  Maybe "Custom Query"?)  This time, instead of using Custom Table (which seems to only allow me the option of selecting ways to choose groups of Nodes, instead of running the SWQL query), I've tried Custom Query.
                4. Edit Resource
                5. Custom Query > Edit Resource
                6. Enter this SWQL script:

                SELECT NT.NodeProperties.Nodes.IPAddress, NT.NodeProperties.Nodes.SysName, NT.NodeProperties.Nodes.MachineType, NT.DeviceOutput

                FROM NCM.TransferResults NT

                WHERE (RequestedScript LIKE 'show license in-use%')


                I could click "Enable Search", and then perhaps search for 4510's?  I'm not certain how to use this area, and your advice would be appreciated


                The Preview shows no output.  The "Custom Query" option seems not to be appropriate for my needs.


                When I delete this Report and start over, I find no way to select my 4510's AND to run the SWQL script.


                I'm missing some basic Report-building skill, and I don't know where to turn.  Can you offer advice?


                Rick Schroeder