EEM(Embeded Event Management) for interface is not working

[shanzee111]

Hello All,

I am using EEM scenario in my GNS3 lab. When BGP session is down, a log generated and interface vlan is down in result of this log. First time, it was working fine but now it is not working. Can anyone help me in this regards. Following is the configuration for reference:

event manager applet PRIMARY_DOWN
event syslog pattern "%BGP-5-ADJCHANGE: neighbor 172.16.25.21 Down BGP Notification sent"
action 1.0 cli command "enable"
action 2.0 cli command "conf t"
action 3.0 cli command "interface vlan 43"
action 4.0 cli command "shut"

event manager applet PRIMARY_UP
event syslog pattern "%BGP-5-ADJCHANGE: neighbor 172.16.25.21 Up"
action 1.0 cli command "enable"
action 2.0 cli command "conf t"
action 3.0 cli command "interface vlan 43"
action 4.0 cli command "no shut"

Regards,

Zeeshan Saeed

[balaji.bandi]

i do not see any issue with EEM Script here :

to check the debug, enable as below command :

debug event manager all (observe any syntax wrong when the EEM invoked based in criteria matched)

[balaji.bandi]

May be i am missing something here : (i just tested your EEM same exactly line by line in eve-ng) - it work like charm more than 3 times. (i have used IOL 15.X) - L3 Image.

what image did you use in gns3 to test?

the debug not full - I have not seen the output after config t ?

*May 26 09:15:55.833: %HA_EM-6-LOG: PRIMARY_DOWN : DEBUG(cli_lib) : : IN : #conf t
*May 26 09:15:55.853: cli_history_entry_add: free_hist_list size=0, hist_list size=7
*May 26 09:15:55.853: eem_no_scan flag set, skipping scan of command_string=check_eem_cli_policy_handler

[shanzee111]

I m using Version 12.4(25d). You mean it may be bugs for GNS3 or IOS what I am using?

[balaji.bandi · Accepted solution]

not sure never tried that version. Try any latest IOL and let us know.

[shanzee111 · Accepted solution]

Dear Balaji,

After testing on Version 15.2(4)S5, my issue has been resolved. There was issue in that version as you can see in https://quickview.cloudapps.cisco.com/quickview/bug/CSCsz70112

Thanks for you support.

[Dan Frey]

Remove % in the event syslog pattern statement.

[balaji.bandi]

@Dan Frey with % still works for me - on a side note.