cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Ask the Expert- SD-WAN

1778
Views
0
Helpful
2
Replies
Highlighted
Beginner

EEM variable inside syslog message

i am current using event manager to check for output drops on an interface every 24 hours.  I am sending this syslog message to LMS for alerting.  I would like to including in the action description the difference in oid value (current oid value - oid value last polling).  Is this possible to create the value and pass it through in the syslog message?

thanks!

event manager applet OUTPUT_DROPS

event snmp oid 1.3.6.1.2.1.2.2.1.19.10148 get-type exact entry-op gt entry-val "1" entry-type increment poll-interval 86400

action 1 syslog priority critical msg "Interface ouput drops have increased since last polling" facility "QOS"

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

EEM variable inside syslog message

Please see:

http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_eem_policy_cli.html#wp1064371

Scroll down to the section in this table about "SNMP Event Detector"

You can use the variables shown in your actions for applets triggered by the SNMP OID events.  For example:

action 1 syslog priority critical msg "Interface ouput drops have increased to: $_snmp_oid_val" facility "QOS"

Mike

2 REPLIES 2
Cisco Employee

EEM variable inside syslog message

Please see:

http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_eem_policy_cli.html#wp1064371

Scroll down to the section in this table about "SNMP Event Detector"

You can use the variables shown in your actions for applets triggered by the SNMP OID events.  For example:

action 1 syslog priority critical msg "Interface ouput drops have increased to: $_snmp_oid_val" facility "QOS"

Mike

Beginner

EEM variable inside syslog message

perfect.  thanks for the help.

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards