event manager command did not executed

[mohamedabdelalim]

I created this two applet 

to execute when that log appear 

but it did not executed so what is the wrong

config t
event manager applet clearing
event syslog pattern "IKE message from 10.121.1.100 has no SA and is not an initialization offer"
action 0.5 cli command "enable"
action 1.0 cli command "clear crypto gdoi"
action 1.1 cli command "yes"

[mohamedabdelalim]

any help pls 

[Georg Pauwen]

Hello, 

you need to add "pattern confirm":

event manager applet clearing
event syslog pattern "IKE message from 10.121.1.100 has no SA and is not an initialization offer"
action 0.5 cli command "enable"
action 1.0 cli command "clear crypto gdoi" pattern "confirm"
action 1.1 cli command "yes"

[mohamedabdelalim]

didnot work 

config t
event manager applet interfacing
event syslog pattern "Interface GigabitEthernet0, changed state to down"
action 1.0 cli command "enable"
action 1.1 cli command "clear crypto gdoi" pattern "confirm"
action 1.2 cli command "yes"

[Georg Pauwen]

Hello,

post the output of:

debug event manager action cli

[mohamedabdelalim]

[Georg Pauwen]

Hello,

change the syslog pattern match by adding the '%' and the '*':

config t
event manager applet clearing
event syslog pattern "%*IKE message from 10.121.1.100 has no SA and is not an initialization offer"
action 0.5 cli command "enable"
action 1.0 cli command "clear crypto gdoi" pattern "confirm"
action 1.1 cli command "yes"

[mohamedabdelalim]

anthor question what if i want to excute this command

clear crypto gdoi 
yes

every day at 7am and 2pm by the event manager instead of the syslog what the command to do that .. thanks a lot for your effort 

[mohamedabdelalim]

any updates ?

[mohamedabdelalim]

Not working 

[Georg Pauwen]

Hello,

enable debug:

debug event manager action cli

then run the applet manually:

event manager run clearing (or whatever the name of your applet is)

then post the output.

[mohamedabdelalim]

[Georg Pauwen]

Hello,

you need to change the applet as below:

event manager applet clearing
event none
action 0.5 cli command "enable"
action 1.0 cli command "clear crypto gdoi" pattern "confirm"
action 1.1 cli command "yes"

[mohamedabdelalim]

but with this applet when the commands will excute ? 

i mean what will happen to excute the commands 

[Georg Pauwen]

Hello,

the 'event none' is just to test if all action are executed. Post the debug output after manually running the applet.