cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3024
Views
0
Helpful
2
Replies

EEM variable inside syslog message

bryan totten
Level 1
Level 1

i am current using event manager to check for output drops on an interface every 24 hours.  I am sending this syslog message to LMS for alerting.  I would like to including in the action description the difference in oid value (current oid value - oid value last polling).  Is this possible to create the value and pass it through in the syslog message?

thanks!

event manager applet OUTPUT_DROPS

event snmp oid 1.3.6.1.2.1.2.2.1.19.10148 get-type exact entry-op gt entry-val "1" entry-type increment poll-interval 86400

action 1 syslog priority critical msg "Interface ouput drops have increased since last polling" facility "QOS"

1 Accepted Solution

Accepted Solutions

mtimm
Cisco Employee
Cisco Employee

Please see:

http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_eem_policy_cli.html#wp1064371

Scroll down to the section in this table about "SNMP Event Detector"

You can use the variables shown in your actions for applets triggered by the SNMP OID events.  For example:

action 1 syslog priority critical msg "Interface ouput drops have increased to: $_snmp_oid_val" facility "QOS"

Mike

View solution in original post

2 Replies 2

mtimm
Cisco Employee
Cisco Employee

Please see:

http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_eem_policy_cli.html#wp1064371

Scroll down to the section in this table about "SNMP Event Detector"

You can use the variables shown in your actions for applets triggered by the SNMP OID events.  For example:

action 1 syslog priority critical msg "Interface ouput drops have increased to: $_snmp_oid_val" facility "QOS"

Mike

perfect.  thanks for the help.