cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
851
Views
0
Helpful
2
Replies
krinlaurek
Beginner

EEM script for "config t" on Nexus

Hello,

I applied the following script that detects "configure terminal" execution then it sends a syslog message:

event manager applet myApplet
 event cli match "conf t"
 action 1.0 event-default
 action 2.0 syslog priority notifications msg “test”

When I was validating my configuration, I noticed that the applet sent so many syslog messages but I only executed the command just once (I expected to receive only one message). Is there a way to receive only one syslog message?

Device Information:

N5K 7.0(5)N1(1)

Thanks in advance.

2 REPLIES 2
Joe Clarke
Hall of Fame Cisco Employee

This could be a bug.  I tested on an N7K running 7.3, and I only get one message.

That said, this message will be printed whenever anyone enters config t.  So, it could be that a network management station is connecting to the device based on the syslog messages you're generating.  I would confirm that no one or nothing else is entering config mode.

Hello Joe, thanks for your feedback.  I will take that possibility into account, an interesting point of view...