Monitoring an IPSec tunnel in Cisco CSR AWS instance

[julietv9]

I have a handful of IP SEC tunnels that are defined inside a Cisco CSR 1000V instance running on AWS EC2 hardware.

What are the recommended ways to monitor these tunnel interfaces? I want to be able to monitor the status of the tunnel as well as the bytes of data transmitted through the tunnel.

I'm looking into SNMP traps but the documentation at https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-16-6/snmp-xe-16-6-book/nm-snmp-cfg-snmp-support.html seems to indicate that this is not recommended.

Thanks!

[mosiddi3]

If any one has implemented the monitoring of the tunnels, kindly share how you did it.