Is it possible to take an action (i.e. an email or a syslog message) if someone had typed 'conf t' or 'config term' ?
This is to notify that something seems to be getting configured before it really happens..
the match should be on all possible variations of the 'configure terminal' command.
I do know how to create an email using eem; but how to match/track the config mode ?
