RE: EEM not working

From: Lloyd Ardoin <Lloyd_at_TheWizKid.biz>
Date: Wed, 20 May 2009 14:28:21 -0500

I fought this for a long time once. Here is the answer...basic regular
expression formatting issue on the ip address, since the period is a meta
character it has to be escaped like this - 192\.168\.1\.0

HTH,
Lloyd

From: Malla, Girish
Sent: Wed 5/20/2009 12:37 PM
To: ccielab_at_groupstudy.com; nobody_at_groupstudy.com
Subject: EEM not working

Experts,

 I am facing problem with below configuration. Anything wrong in this
configuration? The EEM is not able to match this syslog message. Does
the EEM match only specific syslog messages?

event manager applet test

 event syslog pattern "%DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor
192.168.2.1 (Serial1/0) is down: holding time expired"

 action 1.0 cli command "enable"

 action 1.1 cli command "configure terminal"

 action 1.2 cli command "no ip route 192.168.1.0 255.255.255.0
fastEthernet 0/0 192.168.3.2"

 action 1.3 syslog msg "Static route removed"

below are the output of "debug event manager all"

*Mar 1 03:56:34.431: fh_fd_syslog_event_match: num_matches = 0

*Mar 1 03:56:34.431: fh_fd_data_syslog: num_matches = 0

Regards,

Girish

Blogs and organic groups at http://www.ccie.net
Received on Wed May 20 2009 - 14:28:21 ART

This archive was generated by hypermail 2.2.0 : Mon Jun 01 2009 - 07:04:43 ART