Creating a basic syslog message but masking "EEM-prefix"

[pburch]

Trying to create a simple syslog message, but I want to remove the "EEM prefix" so that it looks like a legitimate syslog message for testing.  Is there a way to remove or mask what the applet has included?

!

event manager applet none

event none

action 100 syslog msg "WAAS-3-WAAS_AD_BLACKLIST_FAILURE: IOS-WAAS auto-discovery negotiation failed with peer AB-CD-EE-00-12-34  for the following reason: WAAS-X"

!

what I want to see:

Jun  3 12:41:31.205:  WAAS-3-WAAS_AD_BLACKLIST_FAILURE: IOS-WAAS  auto-discovery negotiation  failed with peer AB-CD-EE-00-12-34  for the  following reason: WAAS-X

What I see: <<red lines through what I don't want to see>>

Jun  3 12:41:31.205: %HA_EM-6-LOG: none: WAAS-3-WAAS_AD_BLACKLIST_FAILURE: IOS-WAAS auto-discovery negotiation failed with peer AB-CD-EE-00-12-34  for the following reason: WAAS-X

Thank You.

[Joe Clarke]

With applets, this can only be done in EEM 4.0.  Prior to that, you'd need to use Tcl and send your syslogs using the "syslog:" channel.  For example:

set fd [open "syslog:" "w"]

puts $fd {WAAS-3-WAAS_AD_BLACKLIST_FAILURE: IOS-WAAS auto-discovery negotiation  failed with peer AB-CD-EE-00-12-34  for the following reason: WAAS-X}

close $fd

Note, that doing this will create a syslog that EEM can intercept.  As such be careful not to create an infinite loop.