--- title: Non-privileged SSH commands during probe-based discovery description: These tables display the SSH commands run by Discovery probes on target devices during horizontal discovery. These SSH commands don’t require elevated privileges to run. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/discovery/discovery-ssh-probe-commands.html release: australia product: Discovery classification: discovery topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 3 keywords: [SSH commands, probe commands, SSH probe commands, no elevated privileges] breadcrumb: [SSHCommand probe, List of Discovery probes, Discovery probes and sensors, Using Discovery, Discovery, ITOM Visibility, IT Operations Management] --- # Non-privileged SSH commands during probe-based discovery These tables display the SSH commands run by Discovery probes on target devices during horizontal discovery. These SSH commands don’t require elevated privileges to run. ## Operating systems For information on commands used by Service Mapping during the top-down discovery, see [Service Mapping commands requiring a privileged user](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/service-mapping/r_CommandsnCredentials.md) and [Service Mapping commands not requiring a privileged user](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/service-mapping/r_NonSudoCommands.md).

Command $ECC queue name$	Parameters
`sh`	variable
`lsattr`	-El sys0 -a modelname -F value
`lslpp`	-Lc
`/etc/ifconfig`	-au; netstat -in
`instfix`	-i \\| grep AIX\_ML
`oslevel`	-r
`echo `lsattr`	-El sys0 -a systemid \\| cut ...
`rmsock`
`lsdev`	- -C -F 'name,status' -c memory\\|grep '^mem' - -C -F 'name,status' -c processor -S a
`ps`	-aef -o "pid,ppid,args"

Command $ECC queue name$	Parameters
`arp`	-n
`bash`	variable
`cat`	- /sys/hypervisor/compilation/compiled\_by - /sys/devices/virtual/dmi/id/product\_uuid - */etc/\release - /proc/cpuinfo - /var/lib/dpkg/status - /proc/mounts - /proc/scsi/scsi - /etc/iscsi/initiatorname.iscsi - /sys/hypervisor/compilation/compiled\_by**
`grep MemTotal`	/proc/meminfo
`ifconfig`	-a && route -n
`sh`	variable
`rpm`	-q -a --qf
`ls`	- *-d /sys/block/\ \\| grep '^/sys/block/\\$dm-\\|sd\\|sr\\$' - /sys/class/scsi\_host/host\/protocol 2> /dev/null* - */sys/class/scsi\_host/host\/info 2> /dev/null - -d /sys/class/fc\_host/host\***
`shopt`	-s extglob
`findmnt`	`-l -n -o SOURCE,TARGET 2>/dev/null`
`find`	/sys/class/iscsi\_session -maxdepth 1 -type l
`fcoeadm`	-i
`ip`	- neighbor 2> /dev/null - address show && ip route
`hostname`	-f 2> /dev/null
`dnsdomainname`	2> /dev/null
`grep`	- *^\[\[:space:\]\]\domain /etc/resolv.conf - ^\[\[:space:\]\]\search /etc/resolv.conf*
`wget`	- --spider -t 1 -T 1 - -qO-
`curl`	--connect-timeout 1
`python`	-c
`sudo cat`	/sys/devices/virtual/dmi/id/product\_uuid

Command $ECC queue name$	Parameters
`ps`	-elx
`echo itick_per_usec/D`	\\| adb -k /stand/vm...
`sh`	variable
`model`
`uname`	- -i - -r
`swlist`	-l product \\| grep -v 'PH..\_'
`echo 'memory_installed_in_machine/D'`	\\| a...
`netstat`	-in \\| grep -v Name
`lanscan`	-ia
`typeset`	-i2
`ioscan`	-fnkC processor \\| grep PROCESSOR \\| wc -l

Command $ECC queue name$	Parameters
`sh`	variable
`kstat`	cpu\_info
`pkginfo`	-l \\| egrep 'PKGINST\\|NAME\\|CATEGO...
`prtconf`	- \\| grep Memory - \\| grep 'System Configuration:' - -pv 2>/dev/null
`ifconfig`	-a; netstat -pnr -f inet
`arp`	-an
`showrev`	-p
`sneep`	-T
`bash`	variable
`pkg`	list
`iostat`	-En \\| awk '/^c/'
`zpool`	- list - status \\| awk '$1 == "NAME", $1 == ""'
`df`	-k
`fcinfo`	hba-port
`zonename`
`zoneadm`
`zonecfg`	-z
`hostid`
`uname`	-r
`nawk`
`ps`	- -o pid,ppid - -awwx
`pfiles`

Command $ECC queue name$	Parameters
`system_profiler`	- SPHardwareDataType SPMemoryDataType -xml - SPSerialATADataType SPSASDataType SPFireWireDataType -xml - SPNetworkDataType -xml;ifconfig \\| grep '\\Winet6\\W' - SPSoftwareDataType -xml - SPHardwareDataType -xml - SPApplicationsDataType -xml
`last`	\\| grep -m 1 console
`hostname`	2> /dev/null
`grep`	- *'^\[\\s\]\domain' /etc/resolv.conf - '^\[\\s\]\search' /etc/resolv.conf*

Command $ECC queue name$	Parameters
`ps`	- awwxo pid,ppid,command \\| sed -n '/<defunct>/!p' - -ef
`sh`	variable
`cat`	variable
`variable`	-version
`uname`	-a
`df`	-kP
`uptime;env`	LC\_ALL=C date '+%a %b %e %H:%M %Z %Y'
`echo`	\\echo \`uname -I\` \`hostname\` \`uname -Iv\`.\`uname -Ir\` 2>&1\`\`
`awk`
`grep`
`find`
`uuencode`	-m
`base64`	-w 0
`wc`	-c
`nohup`
`vmware`	-v 2>&1
`systemctl`	status cloudian-s3 2>&1

|Command $ECC queue name$|Parameters| |--------------------------|----------| |`echo`|**\\lshmc -V 2>&1\`\`**| ## Web servers |Command $ECC queue name$|Parameters| |--------------------------|----------| |`sh`|**variable**| |`httpd_command`|**-V**| |Command $ECC queue name$|Parameters| |--------------------------|----------| |`sh`|**variable**| |`cat`|**variable**| |`find -L ${dirname}`|**-name web.xml -print 2>/dev/null**|

Command $ECC queue name$	Parameters
`sh`	- get-nginxcfg - get-nginx-ver

## Databases |Command $ECC queue name$|Parameters| |--------------------------|----------| |`sh`|**variable**| |`lsnrctl`|**status**| |Command $ECC queue name$|Parameters| |--------------------------|----------| |`cat`|**variable**| |`variable`|**-V**| |Command $ECC queue name$|Parameters| |--------------------------|----------| |`cat`|**variable**| |`sh`|**variable**| |`variable`|**-lv \| grep ^$\{processID\}**| |`echo`|**"version" \| hbase shell**| ## Applications |Command $ECC queue name$|Parameters| |--------------------------|----------| |`sh`|**variable**| |Command $ECC queue name$|Parameters| |--------------------------|----------| |`sh`|**variable**| |`tmsh`|**show sys version 2>&1**| |Command $ECC queue name$|Parameters| |--------------------------|----------| |`sh`|**variable**| |`variable`|**-v**| |Command $ECC queue name$|Parameters| |--------------------------|----------| |`find`|**-name web.xml -print**| |`cat`|**variable**| |Command $ECC queue name$|Parameters| |--------------------------|----------| |`sh`|**variable**| |`virsh`|**Various capabilities**|

Command $ECC queue name$	Parameters
`puppet`	- --version - config print
`hostname`	--fqdn

## Storage |Command $ECC queue name$|Parameters| |--------------------------|----------| |`purehw`|**list --all --nvp --type ch**| |`vxprint`|**-AQmb**| |`vxdisk`|**path**| |`sudo vxdisk`|**list \| awk 'NR > 1'**| |`pureblade`|**list 2>&1**| **Parent Topic:**[SSHCommand probe](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/c_SSHCommandProbe.md) **Related topics** [Discovery commands for probes and patterns](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/discovery-command-probe-pattern.md)