Re: what's it? IS THE eem EFFECT?

Yuan Li · ‎03-28-2019

config： event manager applet No_SNMP_V1 event syslog occurs 1 pattern "SYS-5-RESTART.*" action 1.0 cli command "enable" action 2.0 cli command "configure terminal" action 3.0 cli command "no snmp-server group R34d0Nly v1" action 4.0 cli command "end" action 5.0 cli command "write" logging: ar 7 00:09:44.491 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Thursday, March 7, 2019 0:09 ------- Mar 7 08:20:51.312 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): 6 ----- Solarwinds time : 8:20 07-Mar-19 ------- Mar 8 00:04:32.011 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Friday, March 8, 2019 0:04 ------- Mar 9 00:05:19.700 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Saturday, March 9, 2019 0:04 ------- Mar 10 00:05:15.071 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Sunday, March 10, 2019 0:04 ------- Mar 11 00:05:03.958 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Monday, March 11, 2019 0:04 ------- Mar 12 00:04:54.669 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Tuesday, March 12, 2019 0:04 ------- Mar 13 00:05:49.686 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Wednesday, March 13, 2019 0:05 ------- Mar 14 00:07:00.330 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Thursday, March 14, 2019 0:06 ------- Mar 15 00:05:32.476 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Friday, March 15, 2019 0:05 ------- Mar 16 00:04:55.092 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Saturday, March 16, 2019 0:04 ------- Mar 17 00:05:11.825 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Sunday, March 17, 2019 0:04 ------- Mar 18 00:04:58.848 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Monday, March 18, 2019 0:04 ------- Mar 19 00:04:42.898 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Tuesday, March 19, 2019 0:04 ------- Mar 20 00:04:52.296 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Wednesday, March 20, 2019 0:04 ------- Mar 21 00:16:09.920 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Thursday, March 21, 2019 0:15 ------- Mar 22 00:05:11.912 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Friday, March 22, 2019 0:04 ------- Mar 23 00:04:51.713 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Saturday, March 23, 2019 0:04 ------- Mar 24 00:05:07.160 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Sunday, March 24, 2019 0:04 ------- Mar 25 00:05:13.686 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Monday, March 25, 2019 0:04 ------- Mar 26 00:04:39.979 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Tuesday, March 26, 2019 0:04 ------- Mar 27 00:05:22.933 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Wednesday, March 27, 2019 0:05 ------- Mar 28 00:14:27.089 GZ: %SYS-2-LOGMSG: Message from 1(superadmin): ----- Start Of the day Thursday, March 28, 2019 0:14 --

mihaly.szuhanics · ‎05-16-2019

Hi,

the log messages have nothing to do with the EEM applet that you have provided. Most probably there is another script running to add these entries, maybe kron.

Please mark this comment as helpful if it answers your question. Thank you

Georg Pauwen · ‎05-16-2019

Hello,

I would say these log entries are coming from an external SNMP monitoring tool, I see 'Solarwinds time', do you have Solarwinds running somewhere ? 'Superadmin' is the built in admin account in Solarwinds...

You can actually generate these entries manually:

Router#send log 2 Message from 1(superadmin): ----- Start Of the day Thursday, March 7, 2019 0:09 ------- Mar 7 08:20:51.312

This will generate a syslog similar to the ones you see

mihaly.szuhanics · ‎05-16-2019

Hi,

Good point there!