Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco EEM

Is there a EEM script to watch for interface errors and email out?

1 REPLY
New Member

Cisco EEM

Hello - I have modified this applet to work in my environment with success.  I found it at this website -

http://blog.ioshints.info/2011/07/monitor-multiple-interfaces-with-single.html#more

event manager environment _email_server 10.10.10.10
event manager environment _email_to lan_admin@example.com
event manager environment _info_routername Router
!
event manager applet multiple_if
event tag if_1 interface name Serial0/0/0 parameter input_errors_crc →
entry-op ge entry-val 2 entry-type increment poll-interval 60
event tag if_2 interface name Serial0/0/1 parameter input_errors_crc →
entry-op ge entry-val 2 entry-type increment poll-interval 60
event tag if_3 interface name Serial0/0/2 parameter input_errors_crc →
entry-op ge entry-val 2 entry-type increment poll-interval 60
event tag if_4 interface name Serial0/0/3 parameter input_errors_crc →
entry-op ge entry-val 2 entry-type increment poll-interval 60
event tag if_5 interface name Serial0/1/0 parameter input_errors_crc →
entry-op ge entry-val 2 entry-type increment poll-interval 60
event tag if_6 interface name Serial0/1/1 parameter input_errors_crc →
entry-op ge entry-val 2 entry-type increment poll-interval 60
trigger
correlate event if_1 or event if_2 or event if_3 or event if_4 or →
    event if_5 or event if_6
action 1.0 syslog msg "CRC failure leased line $_interface_name"
action 2.0 mail server "$_email_server" to "$_email_to" →
from "$_info_routername@example.com" →
subject "CRC problems on $_info_routername interface $_interface_name" →
body "CRC failures have exceeded the threshold"

503
Views
0
Helpful
1
Replies
CreatePlease to create content