12-13-2016 07:29 PM
Hello,
I applied the following script that detects "configure terminal" execution then it sends a syslog message:
event manager applet myApplet
event cli match "conf t"
action 1.0 event-default
action 2.0 syslog priority notifications msg “test”
When I was validating my configuration, I noticed that the applet sent so many syslog messages but I only executed the command just once (I expected to receive only one message). Is there a way to receive only one syslog message?
Device Information:
N5K 7.0(5)N1(1)
Thanks in advance.
12-14-2016 11:08 AM
This could be a bug. I tested on an N7K running 7.3, and I only get one message.
That said, this message will be printed whenever anyone enters config t. So, it could be that a network management station is connecting to the device based on the syslog messages you're generating. I would confirm that no one or nothing else is entering config mode.
12-15-2016 05:19 PM
Hello Joe, thanks for your feedback. I will take that possibility into account, an interesting point of view...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide