I want to create just one applet to monitor all my vpn tunnels ( I cannot use .tcl scripting, it bombs on sending emails to our old SMTP server, but applets work fine).
Here is what I have ....
event manager applet VPN-Down
event syslog occurs 1 pattern ".*%CRYPTO-5-SESSION_STATUS:.*Crypto.*tunnel.*is.*DOWN.*192.168.1.1.*"
action 0 cli command "enable"
action 1.0 syslog msg "VPN is down"
action 2.0 cli command "show crypto isakmp sa | incl 192.168.1.1"
action 3.0 mail server "10.150.0.10" to "user@mail.com" from "user@mail.com" subject "VPNt is down" body "$_cli_result"
How do I work this so I can pull the ip address (192.168.1.1) from the syslog match as a variable and then run the appropriate commands?
Any help would be awesome.
