I would check your white spacing and escape the ( and ) with \.
Handy tip: you can send messages to your syslog with "send log
<string>" to test.
-nick
On Wed, May 20, 2009 at 5:21 PM, Bryan Bartik <bbartik_at_ipexpert.com> wrote:
> Malla,
>
> Is this a real rack or in dynamips? I seem to always face this issue with
> dynamips.
>
> On Wed, May 20, 2009 at 11:37 AM, Malla, Girish <Girish.Malla_at_amd.com>wrote:
>
>> Experts,
>>
>>
>>
>> I am facing problem with below configuration. Anything wrong in this
>> configuration? The EEM is not able to match this syslog message. Does
>> the EEM match only specific syslog messages?
>>
>>
>>
>>
>>
>> event manager applet test
>>
>> event syslog pattern "%DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor
>> 192.168.2.1 (Serial1/0) is down: holding time expired"
>>
>> action 1.0 cli command "enable"
>>
>> action 1.1 cli command "configure terminal"
>>
>> action 1.2 cli command "no ip route 192.168.1.0 255.255.255.0
>> fastEthernet 0/0 192.168.3.2"
>>
>> action 1.3 syslog msg "Static route removed"
>>
>>
>>
>> below are the output of "debug event manager all"
>>
>>
>>
>> *Mar 1 03:56:34.431: fh_fd_syslog_event_match: num_matches = 0
>>
>> *Mar 1 03:56:34.431: fh_fd_data_syslog: num_matches = 0
>>
>>
>>
>> Regards,
>>
>> Girish
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> Bryan Bartik
> CCIE #23707 (R&S), CCNP
> Sr. Support Engineer - IPexpert, Inc.
> URL: http://www.IPexpert.com
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Thu May 21 2009 - 00:38:53 ART
This archive was generated by hypermail 2.2.0 : Mon Jun 01 2009 - 07:04:43 ART