{"id":2229,"date":"2017-06-15T15:07:24","date_gmt":"2017-06-15T14:07:24","guid":{"rendered":"http:\/\/mccltd.net\/blog\/?p=2229"},"modified":"2017-06-15T15:07:24","modified_gmt":"2017-06-15T14:07:24","slug":"eem-script-to-check-log-messages-and-trigger-email","status":"publish","type":"post","link":"http:\/\/darenmatthews.com\/blog\/?p=2229","title":{"rendered":"EEM Script to check log messages and trigger email"},"content":{"rendered":"

Here’s a tip to become alerted when an interface is down (in this case a VPN tunnel). The script can be adapted to look for any pattern in the syslog and send a triggered email message:<\/p>\n

event manager environment _ifDown_rcpt somebody@somewhere.com
\nevent manager session cli username “admin”
\nevent manager applet MailOnIfDown
\nevent syslog occurs 1 pattern “%LINEPROTO-5-UPDOWN.* Tunnel” period 1
\naction 1.0 mail server “smtp-server@somewhere.com” to “$_ifDown_rcpt” from “router-hostname@somewhere.com” subject “DON’T PANIC – Tunnel Changed State!” body “$_syslog_msg”
\n!
\nend<\/p><\/blockquote>\n

<\/p>\n

Verify that the EEM script has been registered:<\/p>\n

ROUTER#show event manager policy registered<\/strong>
\nNo. Class Type Event Type Trap Time Registered Name
\n1 applet user syslog Off Thu Jun 15 13:53:04 2017 MailOnIfDown
\noccurs 1 period 1.000 pattern {%LINEPROTO-5-UPDOWN.* Tunnel}
\nmaxrun 20.000
\naction 1.0 mail server “smtp-server@somewhere.com” to “$_ifDown_rcpt” from “router-hostname@somewhere.com” subject “DON’T PANIC – Tunnel Changed State!” body “$_syslog_msg”<\/p><\/blockquote>\n

ROUTER#<\/p>\n","protected":false},"excerpt":{"rendered":"

Here’s a tip to become alerted when an interface is down (in this case a VPN tunnel). The script can be adapted to look for any pattern in the syslog and send a triggered email message: event manager environment _ifDown_rcpt somebody@somewhere.com event manager session cli username “admin” event manager applet MailOnIfDown event syslog occurs 1 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[83,67],"tags":[],"_links":{"self":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2229"}],"collection":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2229"}],"version-history":[{"count":1,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2229\/revisions"}],"predecessor-version":[{"id":2230,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2229\/revisions\/2230"}],"wp:attachment":[{"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2229"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2229"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/darenmatthews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}