I've ben having significant issue with some EEM actions I'm trying to get going. I have removed all other events and created a very simplistic event for the sake of troubleshooting and seeking help.
I've tried various EEM scrips across multiple platforms, 3850 and IE-4010. This is an IE-4010 running the latest gold star code (as of a week or two back) from Cisco, 15.2(8)E1.
[REMOVED]#terminal monitor
[REMOVED]#show run | b event manager
event manager applet SYSLOG-RECOGNITION
event syslog pattern "%SYS-5-CONFIG_I:"
action 1.00 syslog msg "Config Message Recognized"
!
end
[REMOVED]#conf t
Enter configuration commands, one per line. End with CNTL/Z.
[REMOVED](config)#exit
[REMOVED]#
May 19 11:40:50.222: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
[REMOVED]#
[REMOVED]#show log | i SYSLOG-RECOGNITION
May 19 11:28:47.966: %PARSER-5-CFGLOG_LOGGEDCMD: User:[REMOVED] logged command:event manager applet SYSLOG-RECOGNITION
[REMOVED]#
[REMOVED]#show logg | i %SYS-5-CONFIG_I:
May 19 09:21:33.907: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 09:21:41.369: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 09:29:38.361: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 09:50:58.987: %PARSER-5-CFGLOG_LOGGEDCMD: User:[REMOVED] logged command:event syslog pattern "%SYS-5-CONFIG_I: Configured from"
May 19 09:51:05.631: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 09:52:54.180: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 09:57:12.306: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 09:59:37.081: %PARSER-5-CFGLOG_LOGGEDCMD: User:[REMOVED] logged command:event syslog pattern "%SYS-5-CONFIG_I: Configured from"
May 19 09:59:42.072: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 10:00:35.736: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 10:11:14.501: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:09:33.103: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:10:56.803: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:12:16.071: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:13:24.510: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:23:17.986: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:24:25.674: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:25:16.042: %PARSER-5-CFGLOG_LOGGEDCMD: User:[REMOVED] logged command:event syslog pattern "%SYS-5-CONFIG_I:"
May 19 11:25:19.544: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:25:40.632: %PARSER-5-CFGLOG_LOGGEDCMD: User:[REMOVED] logged command:event syslog pattern "%SYS-5-CONFIG_I:"
May 19 11:26:14.470: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:26:47.243: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:28:48.029: %PARSER-5-CFGLOG_LOGGEDCMD: User:[REMOVED] logged command:event syslog pattern "%SYS-5-CONFIG_I:"
May 19 11:29:00.487: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:29:18.963: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:38:15.244: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:40:50.222: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:43:52.589: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
May 19 11:44:02.439: %SYS-5-CONFIG_I: Configured from console by [REMOVED] on vty0 ([REMOVED])
[REMOVED]#
Why is this not working?
