I fought this for a long time once. Here is the answer...basic regular
expression formatting issue on the ip address, since the period is a meta
character it has to be escaped like this - 192\.168\.1\.0
HTH,
Lloyd
From: Malla, Girish
Sent: Wed 5/20/2009 12:37 PM
To: ccielab_at_groupstudy.com; nobody_at_groupstudy.com
Subject: EEM not working
Experts,
I am facing problem with below configuration. Anything wrong in this
configuration? The EEM is not able to match this syslog message. Does
the EEM match only specific syslog messages?
event manager applet test
event syslog pattern "%DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor
192.168.2.1 (Serial1/0) is down: holding time expired"
action 1.0 cli command "enable"
action 1.1 cli command "configure terminal"
action 1.2 cli command "no ip route 192.168.1.0 255.255.255.0
fastEthernet 0/0 192.168.3.2"
action 1.3 syslog msg "Static route removed"
below are the output of "debug event manager all"
*Mar 1 03:56:34.431: fh_fd_syslog_event_match: num_matches = 0
*Mar 1 03:56:34.431: fh_fd_data_syslog: num_matches = 0
Regards,
Girish
Blogs and organic groups at http://www.ccie.net
Received on Wed May 20 2009 - 14:28:21 ART
This archive was generated by hypermail 2.2.0 : Mon Jun 01 2009 - 07:04:43 ART