sentry-arp-cache

Retrieves the ARP cache table from a remote sentry.

Command properties

Property	Description
Command type	Transforming
Required permission	Administrator
License usage	N/A
Parallel execution	Supported
Distributed execution	Not supported

Syntax

sentry-arp-cache [timeout=INT]

Options

timeout=INT: RPC timeout in seconds. Accepts a value between 1 and 600. (Default: 30)

Input fields

Field	Type	Required	Description
guid	string	Required	Sentry unique identifier.

Output fields

Field	Type	Description
guid	string	Sentry unique identifier.
type	string	ARP cache entry type (`static`, `dynamic`, `invalid`).
ip	ipaddr	IP address.
mac	string	MAC address.
adapter	string	Network adapter name.
_error	string	Error message if an error occurred.

Error codes

Parsing errors

Error code	Message	Description
23100	No permission to call sentry RPC.	A user without administrator privileges ran the command.
23101	Invalid sentry RPC timeout option value. Use a value between 1 and 600.	The `timeout` option value is not a number or is outside the range 1–600.

Runtime errors

Depending on the guid field value, the following error messages may be assigned to the _error field:

Error message	Description
guid is null	The `guid` field value in the input record is null.
guid should be string	The `guid` field value in the input record is not a string.
guid should be non empty string	The `guid` field value in the input record is an empty string.
not connected	The sentry is not connected.
timeout	The RPC request timed out.
disconnected	The connection was lost while processing the RPC request.

Other RPC exception messages may be assigned to the _error field depending on the state of the system where the sentry is installed.

Description

The sentry-arp-cache command sends asynchronous RPC messages requesting ARP cache information to remote sentries identified by the guid field of each input record. When a response is received from a sentry, the ARP cache information is added to the input record and output.

The maximum length of the asynchronous RPC request queue is 100 by default and can be adjusted using the logpresso.core.sentry_rpc_parallel environment variable. When the queue is full and some sentries respond or time out, new RPC messages are sent to fill the freed slots.

Results are output in the order RPC responses are received, so the output record order may differ from the input record order.

To retrieve results from all Data Nodes at once in a cluster environment, use the sonar-sentry-arp-cache command.

Examples

Retrieve the ARP cache from all sentries
```
system sentries | fields guid | sentry-arp-cache
```
Retrieves the ARP cache table from all connected sentries.
Retrieve with a 60-second timeout
```
system sentries | fields guid | sentry-arp-cache timeout=60
```
Retrieves the ARP cache with the RPC timeout set to 60 seconds.