EEM do not working in Catalyst 3650 and 3750 Switch.

[Jae Hoon Choi]

Hello.

I need help if the EEM doesn't work because of a switch platform or EEM configuration.

I configured EEM on the switch as follows:

Swtich # show run

!

process cpu threshold type total rising 90 interval 5 switch 1

!

event manager applet CPU_Monitor
event syslog pattern ".*CPUMEM-5-RISING_THRESHOLD.*"
action 0.0 set filename "cpu_log.txt"
action 1.0 cli command "enable"
action 1.1 cli command "show clock | append flash:/cpu_log.txt"
action 1.2 cli command "term leng 0"
action 1.3 cli command "show proc cpu sort | append flash:/cpu_log.txt"
action 1.4 cli command "term leng 45"

The switches with EEM settings are as follows.

WS-C3850 (IOS Ver: 03.06.06.E)
WS-C3750 (IOS Ver: 15.0 (2) SE10a)
WS-C3650 (IOS Ver: 03.06.06.E)

EEM works normally in WS-C3850 Switch.

However, the EEM does not work with the WS-C3650 and WS-C3750 switches.

The following log occurred in WS-C3650, but CPU_LOG.txt file was not created in flash.

Jun 8 09:36:58 KST: %SYS-1-CPURISINGTHRESHOLD: Threshold: Total CPU Utilization(Total/Intr): 96%/0%, Top 3 processes(Pid/Util): 306/90%, 34/0%, 4/0%
Jun 27 22:49:26 KST: %SYS-1-CPURISINGTHRESHOLD: Threshold: Total CPU Utilization(Total/Intr): 95%/0%, Top 3 processes(Pid/Util): 306/90%, 140/0%, 131/0%

Swtich #show flash

Directory of flash:/

2 -rwx 12745998 Mar 1 1993 09:19:33 +09:00 c3560-ipservicesk9-mz.122-55.SE12.bin
3 -rwx 8811199 Mar 13 2009 15:09:50 +09:00 c3560-ipbasek9-mz.122-46.SE.bin
4 drwx 0 Mar 1 1993 09:06:32 +09:00 c3560-ipservices-mz.122-25.SEC
5 drwx 192 Mar 1 1993 09:06:31 +09:00 c3560-ipbase-mz.122-25.SEB4
358 -rwx 4024 Apr 3 2019 22:30:34 +09:00 private-config.text
359 -rwx 616 Mar 1 1993 09:01:16 +09:00 vlan.dat
361 -rwx 3096 Apr 3 2019 22:30:34 +09:00 multiple-fs
362 -rwx 7104 Apr 3 2019 22:30:33 +09:00 config.text

!

[brselzer]

Hello,

Sometimes your user permissions can cause problems. Can you try adding "authorization bypass" to the end of your applet like this:

event manager applet CPU_Monitor authorization bypass

Hope that helps!

[Jae Hoon Choi]

Thanks !! I will try :)

[Georg Pauwen]

Hello,

also, you need IP Base installed on the 3650/3750 for EEM to work, make sure that feature set is enabled...

[Leo Laohoo]

---

@Georg Pauwen wrote:

you need IP Base installed on the 3650/3750 for EEM to work, make sure that feature set is enabled...

---

LAN Base 3750X can/will support EEM starting from IOS version 15.2(E) train.

[Georg Pauwen]

I got the info from the data sheet linked below, not sure in how far this is still valid to be honest:

"Embedded Event Manager (EEM) is a powerful and flexible feature that provides real-time network event detection and onboard automation. Using EEM, customers can adapt the behavior of their network devices to align with their business needs. This feature requires the IP Base feature set."

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3650-series-switches/data_sheet-c78-729449.html?dtid=pseggl000183&ccid=cc000890&gclid=CjwKCAjwtO7qBRBQEiwAl5WC22t_bgb9fhaMbV_Ueh0bEBeEZHDFgmpct5dC4T66gmrbQ-yj-T_KShoCv9kQAvD_BwE&gcls...

Check if the problem is with the script itself by running the script manually:

3650#debug event-manager

3650#event manager run  CPU_Monitor