Cisco EEM 2.1 applet monitoring question

I need assistance in configuring an eem applet using an 1841 router running IOS version 12.4(3c) and eem version 2.1. I need the applet to monitor multiple interfaces with condition if all interfaces are down for 15 seconds to execute a clear line 3. This is condition is straight forward when using eem version 3.0/ IOS 15.1 because you can track a list and capture the syslog pattern. When using IOS 12.4(3c), the syslog message does not appear when tracking list object is down. Any ideas on how get this to work?
Thanks.

This should give you what you want.  You will need to set four EEM environment variables first.
intfs_interval  : Time to check the tracked object stateintfs_track     : Tracked object IDintfs_line      : Line to clearintfs_time      : Time to wait before the line is cleared
For example:
event manager environment intfs_interval 60event manager environment intfs_track 5event manager environment intfs_line 3event manager environment intfs_time 15
You will still need your tracked object that watches all interfaces (ID number 5 in the example above).

Similar Messages

  • Cisco EEM Documentation

    Hello,
    where can i find Documentations about the Cisco EEM?
    With commands, instructions and so on...
    For example: How can i configure my Cisco-819 4G Router to change the SIM-Card if the connection decreases (check with ping and so on).
    If i understand the Documents i've read right, it is possible to implement tasks like this with the EEM, but i can't find any usefull Docs.
    Thanks for your help!

    The following document describes the configuration for dual sim with automatic failover when the primary sim connection is lost.
    http://www.cisco.com/c/en/us/td/docs/routers/access/interfaces/software/feature/guide/EHWIC-4G-LTESW.html#wp1305076
    If you want to change the primary sim using EEM, you can use a combination of IPSLA and EEM applet to manually configure the primary sim.
    Here is a good overview of some EEM commands.
    you could potentially use "sh cell 0 sec | inc Active SIM" to determine the current active sim and then change to the opposing.
    Below is an example using a GSM dual sim device. This is unvalidated and untested so test and adjust commands as needed but it should give you a start on how to change things.
    ip sla 11
     icmp-echo 8.8.8.8
     threshold 4000
     frequency 6
    ip sla schedule 11 life forever start-time now
    event manager applet CHECKSIM
     event track 11 state down
     action 01 cli command "enable"
     action 02 cli command "sh cell 0 sec | inc Active SIM"
     action 03 set commandresult $_cli_result
     action 04   regexp "0" $commandresult
     action 05   if $_regexp_result eq 1
     action 06   syslog msg  "Changing Primary SIM to 1"
     action 07   cli command "enable"
     action 08   cli command "conf t"
     action 09   cli command "controller cellular 0"
     action 10   cli command "gsm sim primary slot 1"
     action 11   exit 0
     action 12  end
     action 13   regexp "1" $commandresult
     action 14   if $_regexp_result eq 1
     action 15   syslog msg  "Changing Primary SIM to 0"
     action 16   cli command "enable"
     action 17   cli command "conf t"
     action 18   cli command "controller cellular 0"
     action 19   cli command "gsm sim primary slot 0"
     action 20   exit 0
     action 21  end

  • Cisco EEM. Delay between action cli

    Hi
    I have Cisco  Catalyst 6500 with IOS Version 12.2(17r)SX5
    I need  real-time monitornig of failed interface, to shut it administratively  down and after 5 minutes "no shutdown" it.
    I think is good idea to use Cisco EEM for this task.
    My algorithm is below:
    1. EEM script is looking for event about  failed interface.
    2. EEM script is shutting interface down.
    3. EEM script is waiting 5 minutes.
    4. EEM script is enabling interface.
    I know how to configure EEM for steps 1, 2 and 4, but step 3 I do not.
    Help solve this task, please.

    That's not the version of code running on your switch. That looks like boot ROM code.  In any event, unless you have a Sup2T, you have EEM 2.x.  This solution should work for you.
    event manager environment q "
    event manager applet failed-interface
    event ...
    action 001 cli command "enable"
    action 002 cli command "config t"
    action 003 cli command "interface INTF"
    action 004 cli command "shut"
    action 005 cli command "event manager applet reenable-intf"
    action 006 cli command "event timer countdown time 300"
    action 007 cli command "action 1.0 cli command enable"
    action 008 cli command "action 2.0 cli command $q config t$q"
    action 009 cli command "action 3.0 cli command $q interface INTF$q"
    action 010 cli command "action 4.0 cli command $q no shut$q"
    action 011 cli command "action 4.1 cli command $q no event manager applet reenable-intf$q"
    action 012 cli command "action 5.0 cli command end"
    action 013 cli command "end"

  • Cisco embedded event manager applet

    Hi everyone,
    Can someone please confirm me if we can use cisco eem applet in ASA firewall. I know its for sure used in IOS but whta bout firewall? if yes then please help me out.
    Thanks in advance.

    i want to log-off a vpn tunnel if the VPN tunnel gets stuck. Can it be done on ASA firewall?

  • I want to integrate SMS gateway to Cisco ISE 1.2 and my question is SMS notifications are supported for Guest self−registration

    I want to integrate SMS gateway to Cisco ISE 1.2 and my question is 
    SMS notifications are supported for Guest self−registration Services ? or it should be done by Sponsor 

    I'm not sure I understand the question.  Do you want to log in to the Sponsor Portal using AD credentials?
    Create an Identity Source Sequence using AD as an Authentication Source.  Go to Administration > Identity Management > Identity Source Sequences.  Either Edit or +Add a Sequence and choose from the Authentication Sources shown.
    Then choose that Identity Source Sequence by going to Administration > Web Portal Management > Settings.  Double-click Sponsor from the Left Menu and click Authentication Source.  Choose the Identity Source Sequence.  Click Save.
    I hope this helps.
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Is it possible to use a Linksys By Cisco Wireless-G Internet Home Monitoring Camera with Labview

    I was wondering if it is possible to use a 'Linksys By Cisco Wireless-G Internet Home Monitoring Camera' with Labview
    http://www.dabs.com/productview.aspx?Quicklinx=53PX&SearchType=1&SearchTerms=network+cameras&PageMod...
    I wan't to be able to get the raw data from the camera and analyse it.
    Message Edited by Jam.hall on 03-25-2009 09:03 AM
    Solved!
    Go to Solution.

    Hi Jam.Hall
    I am somewhat hesitant to say you will be able to use this camera with LabVIEW.  It all depends on what functionality you are wanting to utilise on the camera, and how much video you want to analyze.
     - If you want to use the wireless functionality, I am concered that the on board web server will compress and embed the video stream.  I do not beleive this is something we can access in LabVIEW.
     - If you wish to use the ethernet connection, if it is Gigabit Ethernet, then you should be able to use our IMAQ for GigE driver to bring in the feed, but looking at the specs for the camera, I'm not sure that this is an option.
     - My other suggestion might be to utilise the record video stream function that the camera has.  Depending on the format of the video file, you may be able to read in the recorded file and analyse it in LabVIEW.
    If you could explain the purpose of your application, and what you would like to achieve with the system, there may be more suitable products that you can use.
    Kind regards,
    Sheela Sujeeun
    Applications Engineer
    National Instruments UK

  • How long should it take for an answer on a question Cisco agree's is a good question and agree to work on it?

    Guys,
    How long should it take for an answer on a question Cisco agree's is a good question and agree to work on it?
    I have an RVS-4000 and it sends me error message by email on errors. Yet I do not have any documentation on what these error messages mean. I asked these question last May and still have not received any answers.
    I was told it had been forwarded to a engineer for creatation of this documentation in May. Here we are...
    Do any of you agree we need this type of documentation on our Routers? I think it should have been created before these where sold and included with these Routers. Maybe if we all voted on it. Then It might still happen?
    Please add you reply's to this. As it might help to get things moving...
    Bruce

    I created a track on my computer and added it to iTunes
    iCloud only syncs and stores purchases from the iTunes Store.
    "With iCloud, the music, movies, TV shows, and other iTunes content you’ve purchased are available to download to your devices". 
    Apple - iCloud - All your content on all your devices.

  • Documentation of cisco::eem and cisco::lib libs

    Hello Experts,
    Would you be able to help me find the link to complete documentation of cisco:eem / cisco::libs libraries ?
    Thank you.

    Some of the available functions are documented on Cisco.com in the EEM Tcl guide (e.g., the CLI functions and the mail functions).  Some of the others I mention at https://supportforums.cisco.com/docs/DOC-12757#Tcl_Packages .  Between the two sources, I think you'll find everything you're looking for.

  • Cisco TelePresence - more detailed specs and questions

    Hello,
    I am currently conducting a light research into various video-conferencing systems and would love to know a little more about Cisco TelePresence video-collaboration solutions.
    I have read the on-line publications made available by Cisco, but have a few remaining questions.
    Following is the list of such questions, should you find yourself being able to answer any of them - please do net hesitate to do so:
    Q. What is the frame rate of a 1080p video stream when it is being transmitted at no greater than 5Mbps bandwidth consumption?
    Q. What is the maximum possible frame rate for a 1080p video stream?
    Q. Given the 5 Mbps bandwidth consumption limits, what is the latency (without taking into account the underlying network latency) to encode and then decode the 1080p video stream at 25 fps?
    Q. For the purposes of subjective visual evaluation - are there any downloadable images such as a single frame (1:1 screen-shot) of the 1080p video stream transmitted at 5Mbps and 25FPS?
    Q. Security-wise ? what kind of encryption (if any) is being used to encrypt the video streams and how interoperable such encryption systems happen to be? For instance, are the encryption keys communicated in accordance with certain protocol/standard or is the process specific to Cisco products?
    Q. Has anyone (formally or otherwise) tried to interoperate Cisco Telepresence with other video-streaming solutions (e.g. Conference-XP, VLC, etc.)? If, so what were the results?
    Q. Do Cisco Telepresence systems support multicast traffic (e.g. one source / many recipients idiom).
    Kind regards, Leon Zadorin.

    also, just have 1 more question:
    Q. In case if someone (i.e. a 3rd party software developer) was prepared to integrate their own video-streaming solutions (e.g. VLC, Conference XP, AccessGrid, etc.) with Cisco's Telepresence systems - is / will be there any way to obtain necessary technical documents regarding the functionality of Telepresence systems in order to achieve the desired interoperability?
    To start with, such interoperability would be done at the very "basic" level: e.g. being able to see Telepresence's video streams in say VLC or AccessGrid or some other system and then may be being able to transmit video streams from VLC or similar in a format that allows Telepresence system to see the 3rd party content.

  • Cisco EEM trigger between two device, it posable?

    Hello I have question, can I see message form Switch to Router for activation EEM?
    I think one way use SMNP for this.
    On router side i have configuration:
    event manager applet snmp
    event snmp-notification oid 1.3.6.1.4.1.12345.1.0 oid-val "1" op eq maxrun 20000
    action 10 syslog msg "Triggered from Trap!"
    Can Cisco switch send SMNP msg to Router on with special OID? for activation Router Event?
    Maybe someone use another way for communication?

    Sure, this is possible.  You don't have to use purely customized traps, either.  You can use standard EEM traps.  From the source device, do something like:
    event manager applet ospf-change event syslog pattern "OSPF-5-ADJCHG" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf packet" action 3.0 snmp-trap intdata1 424242!snmp-server enable traps event-managersnmp-server host 10.1.1.1 traps public event-manager
    Then on the target device:
    event manager applet ospf-change event snmp-notification oid 1.3.6.1.4.1.9.10.91.1.2.3.1.9. oid-val "424242" op eq src-ip-address 10.1.1.2 action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf packet"!snmp-server manager

  • Cisco Secure ACS 5.4/Monitoring and Report Viewer - SNMP Settings

    Hello Everyone.
    I hope this is the right forum for my question.
    We just purchased 8 1121 ACS 5.4 appliances. I have some familiarity with the older 1113 and 1120 appliances running ACS 4.2. So I have a lot to learn.
    Right now I'm trying to understand the Monitoring and Report Viewer System Configuration. I set the SNMP V2 read comm. string to the same string I configured from the CLI.
    etc-labacsb1-1/admin# show runn | inc snmp
    snmp-server contact "ACS1121;XXXXX"
    snmp-server location "B1 Lab"
    snmp-server community XXXXXX ro
    1) It was not the same string as configured on CLI. Does setting this give me access to query more than system type or server type MIB objects.
    2) Can you provide an example? (for example to query a switch -  snmpwalk -v 1 -c XXXXXX hostname 1.3.6.1.4.1.9.9.43)
    3) What is the MIB object tree OID (1.3.6.1.4.1.9.???) for these ACS appliances?
    Thanks in advance.
    Ray Westphal
    EHI

    that's correct. here is what we have in ACS 5.4 for snmp.
    ACS 5.4 supports Simple Network Management Protocol (SNMP) to provide logging services. The SNMP agent provides read-only SNMPv1 and SNMPv2c support. The supported MIBs include:
    •SNMPv2-MIB
    •RFC1213-MIB (MIB II)
    •IF-MIB
    •IP-MIB
    •TCP-MIB
    •UDP-MIB
    •CISCO-CDP-MIB
    •ENTITY-MIB
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/device_support/sdt54.html#wp71020
    ~BR
    Jatin Katyal
    **Do rate helpful posts**

  • Best Practices for NCS/PI Server and Application Monitoring question

    Hello,
    I am deploying a virtual instance of Cisco Prime Infrastructure 1.2 (1.2.1.012) on an ESX infrastructure. This is being deployed in an enterprise enviroment. I have questions around the best practices for moniotring this appliance. I am looking to monitor application failures (services down, db issues) and "hardware" (I understand this is a virtual machine, but statistics on the filesystem and CPU/Memory is good).
    Firstly, I have enabled via the CLI the snmp-server and set the SNMP trap host destination. I have created a notification receiver for the SNMP traps inside the NCS GUI and enabled the "System" type alarm. This type includes alarms like NCS_DOWN and PI database is down. I am trying to understand what the difference between enabling SNMP-SERVER HOST via the CLI and setting the Notification destination inthe GUI is? Also how can I generate a NCS_DOWN alarm in my lab. Doing NCS stop does not generate any alarms. I have not been able to find much information on how to generate this as a test.
    Secondly, how and which processes should I be monitoring from the Management Station? I cannot easily identify the main NCS procsses from the output of ps -ef when logged in the shell as root.
    Thanks guys!

    Amihan_Zerrudo wrote:
    1.) What is the cost of having the scope in a <jsp:useBean> tag set to 'session'? I am aware that there are a list of scopes like page, application, etc. and that if i use 'session' my variable will live for as long as that session is alive. (did i get this right?). You should rather look to the functional requirements instead of costs. If the bean need to be session scoped (e.g. maintain the logged in user), then do it so. If it just need to be request scoped (e.g. single page form data), then keep it request scoped.
    2.)If the JSP Page where i use that <useBean> is to be accessed hundred of times a day, will it compensate my server resources? Right now i am using the Sun Glassfish Server.It will certainly eat resources. Just supply enough CPU speed and memory to a server. You cannot expect that a webserver running at a Pentium 500MHz with 256MB of memory can flawlessly serve 100 simultaneous users at the same second. But you may expect that it can serve 100 users per 24 hour.
    3.) Can you suggest best practice in memory management given the architecture i described above?Just write code so that it doesn't unnecessarily eat memory. Only allocate memory if your application need to do so. You should rather let the hardware depend on the application requirements, not to let the application depend on the hardware specs.
    4.)Also, I have implemented connection pooling in my architecture, but my application is to be used by thousands of clients everyday.. Can the Sun Glassfish Server take care of that or will I have to purchase a powerful sever?Glassfish is just an application server software, it is not server hardware. Your concerns are rather hardware related.

  • LMS - Internal CSU/DSU monitoring question

    I have a question about LMS's ability to monitor internal CSU/DSU's.
    We're thinking about replacing all of our external CSU/DSU's with internal Cisco CSU/DSU's in all of our routers. I was wondering if any of the LMS versions 3.1, 3.2, or 4.0 have the ability to monitor or trap on circuit errors from that CSU/DSU. I have not worked on a router with a CSU/DSU in it yet, so I'm just unsure of all the logs that may come from it. Does syslog contain logs on circuit errors that LMS will recieve?
    We're looking to use the NM1-T3 CSU/DSU module if that helps answer any of these questions. I couldn't find anything on it in the documentation. We're currently running LMS 2.6, but if this requires 3.2 we can move to that.
    Thank you guys so much for the help. This forum has always been so great for these types of questions

    There are no CSU/DSU specific portions of LMS.  However, as you know, LMS can process syslog messages and perform actions based on patterns in those messages.  I don't know off hand of the specific sysog messages related to this NM.  However, you might try asking about those on the WAN Routing community, or look through the system error messages guide on Cisco.com for your version of IOS.
    Another option is you can use the Embedded Event Manager on the device to run CLI commands (i.e. show commands), parse the output, and produce syslog messages that can be processed by LMS.  This way, if there is a specific show command output you want to monitor, you can do that, and still have RME take action.
    While LMS 2.6 has all of the syslog hooks you'll need, LMS 3.2 (and 4.0) has the Health and Utilization Monitor feature (called Performance Monitor in LMS 4.0) that will allow you to poll MIB objects on your device and take action based on thresholds being crossed.  If your device and IOS support the CISCO-ICSUDSU-MIB, there are some good error related objects there you could poll using HUM (e.g. the objects in the ciscoICsuDsuT1StatusTable).

  • Silent Monitoring Question

    Hello,
    When try to Silent Monitor an Agent using my CSD, I can listen it through my Laptops speaker or headset (if plugged in). Is there any way to do Silent Monitoring by using supervisor's IP Phone?
    If there is any document that supports the answer, please let me know. I appreciate your help.
    Thanks

    Here is some additional information from the scripting guide:
    http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/crs/express_8_5/programming/guide/uccx851gs_scripts.pdf
    pg 515 - Designing remote monitoring scripts.
    A) The "password" it asks during login is your PIN number from CUCM, not your alphanumeric password. The PIN is numbers only, which makes it a bit easier to input on a phone. If it is currently set to checking your actual password, you can change it to check your PIN in the authenticate user step.
    B) The username might be a bit tricky. From the above link you can see the actual script steps. What you could do is set a static username vs. having you enter it. Where you see UserLogin = GetDigitString.... You could replace this with UserLogin="[email protected]" so that you are no longer prompted for the long username. This dives into the realm of custom scripting and can be done with several different methods.
    Let me know if you have any other questions!

  • Cisco Prime LMS 4.1 - Monitoring events

    Dear all
    I have a problem to see the events in the Cisco Prime, for example when an event occurs (port-shutdown) in the switch I receive this information:
    Event Source
    DFM
    Description
    Cisco  Command Monitoring -> Event Command Source: Command Line, Event  Config Source: Running, Event Config Destination: Command Source
    Event Category
    Other
    Fault Last Updated At
    07-Mar-2013 16:57:40
    Event_Description
    InformAlarm
    Component
    192.168.10.5: Cisco Configuration Management Trap
    I don't see the details of the port that was done, or other deatiled that give aditional information abut the event. I have configured the Cisco Prime in this way:
    - Admin > Network > Notification and Action Settings > Event Sets  :   I have marked all the events
    - Admin> Network > Notification and Action Settings>Fault - Email notification : My mail is configured , I received alarms by mail.
    - Admin> Network > Notification and Action Settings>Fault Notification Group  : is configured
    Notification                      Group Name:
    TestSW4
    Device List:
    192.168.10.7 ; 192.168.10.6 ; 192.168.10.5 ; 192.168.10.253 ;
    Event Set:
    All
    Event Severity:
    Critical ; Warning ; Informational ;
    Event Status:
    Active ;
    Customer Identification:
    The snmp was configured in the devices:
    snmp-server system-shutdown
    snmp-server enable traps
    snmp-server community <community> RW
    snmp-server host 192.168.10.x <community>
    PLease your support or give some information to configure correctly the events and failures in cisco prime in order to see correctly

    Hi,
    This community is for collaboration. Pls post your question in the following community:
    Home --> NetPro --> Network Infrastructure --> Network Management --> Discussions
    Thanks,

Maybe you are looking for

  • First time use of FMVT

    Little background : 1) We are on EA-PS 60405 2) Went live in 2009 3) Never executed FMVT and considering it from this year I have done the following towards facilitating FMVT : a) Maintained balance update in a fund master data. b) Defined C/F item c

  • Sound problem

    ....hi, I have 865PE NEO (MS-6742) motherboard and I'm having problem with onboard sound... I tried to use optional S-Bracket (SPDIF) for SPDIF-OUT (optical) and two analog outputs for centar/sub and rear speakers... I've read in manual that when usi

  • FINDER: "Get Info" - Window not opening / not working

    Hi All, I am kinda lost. Since upgrading to 10.6.4, I no longer can open "Get Info" neither through the context menu not through key [cmd+I]. This is in Finder only. On Application Level (iTunes e.g.) it works. I have checked permissions, they're goo

  • Can i add a special character i.e. arrows into a movie clip?

    in imovie under edit it says special characters..i want to add some arrows to a video but not sure if  can..anyone know? thanks

  • Global HotKey for Pause/Play,Next Song, etc.

    It would be nice to have an Global Hotkey so you can pause/play your music while browsing and not switching between screens. Or when you are gaming and you want another song but you don't want to alt tab and stay idle, a (customizable?)  Global Hotke