After upgrading ios-xe from 17.6 to 17.9 (platform AR1001-X and also AR920) tcl code breaks at getting syslog message from the registered syslog event.
Script simplified:
::cisco::eem::event_register_syslog pattern ".*%LINEPROTO.*-5-UPDOWN: Line protocol on Interface .*, changed state to .*" maxrun 20
...
array set event_info [event_reqinfo]
set _syslog_msg $event_info(msg)
puts "This is event syslog msg: $_syslog_msg"
#
output:
%HA_EM-6-LOG: if_description.tcl: can't read "event_info(msg)": no such element in array
If I look over the array with:
foreach {key value} [array get event_info] {
puts "$key => $value"
}
output is:
asr920lab(config-if)#
Feb 5 14:21:07.985: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/9, changed state to down
Feb 5 14:21:08.746: %HA_EM-6-LOG: if_description.tcl: event_pub_sec => 1738765267
Feb 5 14:21:08.746: %HA_EM-6-LOG: if_description.tcl: event_type => 41
Feb 5 14:21:08.746: %HA_EM-6-LOG: if_description.tcl: event_severity => severity-notification
Feb 5 14:21:08.746: %HA_EM-6-LOG: if_description.tcl: mnemonic => UPDOWN
Feb 5 14:21:08.746: %HA_EM-6-LOG: if_description.tcl: event_id => 23
Feb 5 14:21:08.747: %HA_EM-6-LOG: if_description.tcl: msg_count => 1
Feb 5 14:21:08.747: %HA_EM-6-LOG: if_description.tcl: event_type_string => syslog
Feb 5 14:21:08.747: %HA_EM-6-LOG: if_description.tcl: sequence =>
asr920lab(config-if)#
Feb 5 14:21:08.747: %HA_EM-6-LOG: if_description.tcl: priority => notifications
Feb 5 14:21:08.747: %HA_EM-6-LOG: if_description.tcl: timestamp => Feb 5 14:21:07.985
Feb 5 14:21:08.747: %HA_EM-6-LOG: if_description.tcl: event_trigger_num => 1
Feb 5 14:21:08.747: %HA_EM-6-LOG: if_description.tcl: facility => LINEPROTO
Feb 5 14:21:08.748: %HA_EM-6-LOG: if_description.tcl: event_pub_time => 1738765267.987
Feb 5 14:21:08.748: %HA_EM-6-LOG: if_description.tcl: job_id => 55
Feb 5 14:21:08.748: %HA_EM-6-LOG: if_description.tcl: event_pub_msec => 987
asr920lab(config-if)#
As it seems key "msg" is not there anymore.
Is there any other way to get a complete syslog message?
Thanks for any reply on this issue.
Branko
