Cirrus job to run script and send out put to Orion?

Question

I have a current situation where there is a process that runs on Cisco routers. The application stops running for some reason unknown and does not write to the log. I have command that I can execute to view the process is running. What I would like to do is have a scheduled job that runs the command to see if the process is running and send the out put to the event log with the host name. Once in the event log I can have the Orion event forwarder send it as a syslog and then to our NOC to have them work on it.   Here are my questions: 1.       How to get the output to the event log?2.       Am I making this too hard, is there a simpler way to do this?

jswan · Answer

Yes. It sounds like you want to have an EEM or ERM applet write a custom syslog message. The syslog service on the router will then forward that message to whatever syslog hosts you have configured. The documentation referenced above has information on all of this, but it's definitely oriented to someone familiar with programming in general and TCL scripting in particular.

One place to look for examples/help is the Cisco EEM Scripting forum:

forums.cisco.com/.../EEM

aliendan · Answer

So you are saying with a script i could run a command and send the ourput as a syslog message to a destination of my choice ?

jswan · Answer

You can build custom monitoring scripts for Cisco routers with Embedded Event Manager and Embedded Resource Manager, and generate syslog messages with Embedded Syslog Manager:

Docs for 12.4T are here:

www.cisco.com/.../nm_12_4t_book.html

It does require some aptitude with scripting.