Category: IOS EEM


The Cisco IOS Embeded Event Manager (EEM) is designed to make life easier for network admins by tracking and classifying events that take place on a router and then providing notification options for those specific events.  EEM uses event detectors and actions to provide notifications of the events.

Event detectors support the following:

  • monitoring SNMP objects
  • screening Syslog messages for a pattern
  • monitoring counters
  • timers
  • screening cli input for a regular expression match
  • hardware insertion and removal
  • routing table changes
  • IP SLA and NetFlow events
  • Generic On-Line Diagnostics (GOLD) events
  • redundant switchover events
  • inbound SNMP messages
  • etc…

Event actions include the following:

  • Generating prioritized Syslog messages
  • Reloading the router
  • Switching to a secondary processor in a redundant platform
  • generating SNMP traps
  • setting or modifying a counter
  • executing Cisco ISO commands
  • sending brief email messages
  • requesting system information when an event occurs
  • reading or setting the state of a tracked object

EEM commands can be written in the CLI or TCL language.