Non-privileged SSH commands during probe-based discovery

These tables display the SSH commands run by Discovery probes on target devices during horizontal discovery. These SSH commands don’t require elevated privileges to run.

Operating systems

For information on commands used by Service Mapping during the top-down discovery, see Service Mapping commands requiring a privileged user and Service Mapping commands not requiring a privileged user.

Command (ECC queue name)	Parameters
`sh`	variable
`lsattr`	-El sys0 -a modelname -F value
`lslpp`	-Lc
`/etc/ifconfig`	-au; netstat -in
`instfix`	-i \| grep AIX_ML
`oslevel`	-r
`echo` lsattr`	-El sys0 -a systemid \| cut ...
`rmsock`
`lsdev`	-C -F 'name,status' -c memory\|grep '^mem' -C -F 'name,status' -c processor -S a
`ps`	-aef -o "pid,ppid,args"

Command (ECC queue name)	Parameters
`arp`	-n
`bash`	variable
`cat`	/sys/hypervisor/compilation/compiled_by /sys/devices/virtual/dmi/id/product_uuid */etc/release /proc/cpuinfo /var/lib/dpkg/status /proc/mounts /proc/scsi/scsi /etc/iscsi/initiatorname.iscsi /sys/hypervisor/compilation/compiled_by**
`grep MemTotal`	/proc/meminfo
`ifconfig`	-a && route -n
`sh`	variable
`rpm`	-q -a --qf
`ls`	*-d /sys/block/ \| grep '^/sys/block/$dm-\|sd\|sr$' /sys/class/scsi_host/host/protocol 2> /dev/null* */sys/class/scsi_host/host/info 2> /dev/null** -d /sys/class/fc_host/host*
`shopt`	-s extglob
`findmnt`	`-l -n -o SOURCE,TARGET 2>/dev/null`
`find`	/sys/class/iscsi_session -maxdepth 1 -type l
`fcoeadm`	-i
`ip`	neighbor 2> /dev/null address show && ip route
`hostname`	-f 2> /dev/null
`dnsdomainname`	2> /dev/null
`grep`	*^[[:space:]]domain /etc/resolv.conf ^[[:space:]]search /etc/resolv.conf*
`wget`	--spider -t 1 -T 1 -qO-
`curl`	--connect-timeout 1
`python`	-c
`sudo cat`	/sys/devices/virtual/dmi/id/product_uuid

Command (ECC queue name)	Parameters
`ps`	-elx
`echo itick_per_usec/D`	\| adb -k /stand/vm...
`sh`	variable
`model`
`uname`	-i -r
`swlist`	-l product \| grep -v 'PH.._'
`echo 'memory_installed_in_machine/D'`	\| a...
`netstat`	-in \| grep -v Name
`lanscan`	-ia
`typeset`	-i2
`ioscan`	-fnkC processor \| grep PROCESSOR \| wc -l

Command (ECC queue name)	Parameters
`sh`	variable
`kstat`	cpu_info
`pkginfo`	-l \| egrep 'PKGINST\|NAME\|CATEGO...
`prtconf`	\| grep Memory \| grep 'System Configuration:' -pv 2>/dev/null
`ifconfig`	-a; netstat -pnr -f inet
`arp`	-an
`showrev`	-p
`sneep`	-T
`bash`	variable
`pkg`	list
`iostat`	-En \| awk '/^c/'
`zpool`	list status \| awk '$1 == "NAME", $1 == ""'
`df`	-k
`fcinfo`	hba-port
`zonename`
`zoneadm`
`zonecfg`	-z
`hostid`
`uname`	-r
`nawk`
`ps`	-o pid,ppid -awwx
`pfiles`

Command (ECC queue name)	Parameters
`system_profiler`	SPHardwareDataType SPMemoryDataType -xml SPSerialATADataType SPSASDataType SPFireWireDataType -xml SPNetworkDataType -xml;ifconfig \| grep '\Winet6\W' SPSoftwareDataType -xml SPHardwareDataType -xml SPApplicationsDataType -xml
`last`	\| grep -m 1 console
`hostname`	2> /dev/null
`grep`	*'^[\s]domain' /etc/resolv.conf '^[\s]search' /etc/resolv.conf*

Command (ECC queue name)	Parameters
`ps`	awwxo pid,ppid,command \| sed -n '/<defunct>/!p' -ef
`sh`	variable
`cat`	variable
`variable`	-version
`uname`	-a
`df`	-kP
`uptime;env`	LC_ALL=C date '+%a %b %e %H:%M %Z %Y'
`echo`	\echo `uname -I` `hostname` `uname -Iv`.`uname -Ir` 2>&1``
`awk`
`grep`
`find`
`uuencode`	-m
`base64`	-w 0
`wc`	-c
`nohup`
`vmware`	-v 2>&1
`systemctl`	status cloudian-s3 2>&1

|Command $ECC queue name$|Parameters| |--------------------------|----------| |`echo`|**\\lshmc -V 2>&1\`\`**|

Web servers

Command (ECC queue name)	Parameters
`sh`	variable
`httpd_command`	-V

Command (ECC queue name)	Parameters
`sh`	variable
`cat`	variable
`find -L ${dirname}`	-name web.xml -print 2>/dev/null

Command (ECC queue name)	Parameters
`sh`	get-nginxcfg get-nginx-ver

## Databases

Command (ECC queue name)	Parameters
`sh`	variable
`lsnrctl`	status

Command (ECC queue name)	Parameters
`cat`	variable
`variable`	-V

Command (ECC queue name)	Parameters
`cat`	variable
`sh`	variable
`variable`	-lv \| grep ^${processID}
`echo`	"version" \| hbase shell

Applications

Command (ECC queue name)	Parameters
`sh`	variable

Command (ECC queue name)	Parameters
`sh`	variable
`tmsh`	show sys version 2>&1

Command (ECC queue name)	Parameters
`sh`	variable
`variable`	-v

Command (ECC queue name)	Parameters
`find`	-name web.xml -print
`cat`	variable

Command (ECC queue name)	Parameters
`sh`	variable
`virsh`	Various capabilities

Command (ECC queue name)	Parameters
`puppet`	--version config print
`hostname`	--fqdn

## Storage

Command (ECC queue name)	Parameters
`purehw`	list --all --nvp --type ch
`vxprint`	-AQmb
`vxdisk`	path
`sudo vxdisk`	list \| awk 'NR > 1'
`pureblade`	list 2>&1

Parent Topic:SSHCommand probe

title	Non-privileged SSH commands during probe-based discovery
description	These tables display the SSH commands run by Discovery probes on target devices during horizontal discovery. These SSH commands don’t require elevated privileges to run.
locale	en-US
canonical_url	https://www.servicenow.com/docs/r/australia/it-operations-management/discovery/discovery-ssh-probe-commands.html
release	australia
product	Discovery
classification	discovery
topic_type	reference
last_updated	2026-09-10
reading_time_minutes	3
keywords	SSH commandsprobe commandsSSH probe commandsno elevated privileges
breadcrumb	SSHCommand probeList of Discovery probesDiscovery probes and sensorsUsing DiscoveryDiscoveryITOM VisibilityIT Operations Management