Don't recognize '$' sign in Event manager script

[dannyk@nsogroup.com]

Hello ,

i trying to write a script with event manger but i can't use the dollar sign ($) for using the value of the variables 

i tried on routers 2900 and ISR 4300 on both on them it didnt work. 

for example : 

 action 0010 regexp "^.*([0-9][0-9][0-9]):.*:.*DROP.* ([0-9.]+).* -> .*" "$_syslog_msg" _knock_RegEx_Match _knock_Sequence_E1 _knock_Source_E1 - ignore the $_syslog_msg
 action 0020 info type event reqinfo tag _knock_Tag_E2
 action 0030 regexp "^.*([0-9][0-9][0-9]):.*:.*DROP.* ([0-9.]+).* -> .*" "$_syslog_msg" _knock_RegEx_Match _knock_Sequence_E2 _knock_Source_E2

 action 0100 if $_knock_Sequence_E1 lt $_knock_Sequence_E2  - drop an error because the $

can you please explain what is the reason for that ? 

thanks !!!

[omz]

Hi 

I am not an expert on eem scripting .. as a test .. can you please try "$_syslog_msg" without quotes?  $_syslog_msg

Thanks

[dannyk@nsogroup.com]

Hi , 

thanks for the replay , unfortunately it does not help .