An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?
An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?
The correct script must enable the debugging commands when the OSPF adjacency goes from FULL to DOWN. The correct syslog pattern to match this event is '%OSPF-5-ADJCHG: Process x, Nbr x.x.x.x on Interface from FULL to DOWN'. OSPF adjacency change messages are at the notification level (level 5), not critical (level 1). The script must start with the 'enable' command to ensure that the subsequent debugging commands execute in privileged EXEC mode. Based on these requirements, the correct script is the one that has the syslog pattern matching 'FULL to DOWN', the OSPF notification level (5), and starts with the 'enable' command.
This is the correct explanation of why A is the correct answer: There are 4 options, but only 2 has "FULL to DOWN" which is what we are tying to catch. Out of these two only A begin the script with "enable" which is required in EEM because the applet assumes that the user is in EXEC mode, not privileged EXEC or config mode.
I also noticed once you get down to choices A or C (from the "FULL to DOWN" string), one has the log code of "OSPF-5" and one has it as "OSPF-1". From that, I know OSPF Adjacency change is not a severity level 1, it's a level 5, so at that point it seemed clear cut that the answer was A and not C.
5 - notification 6-informational A is on 6 debug info
debug is 7, informational is 6 (default). it sending a syslog message of priority level 6. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/command/eem-cr-book/eem-cr-a2.html
It need to be "FULL to DOWN" is syslog 1st line
Only A&D enable a debug based on earlier events. So B&C are definitely wrong. Between A and D: A also mentions the OSPF neighborship going down, which D doesn't. So the correct answer here is A
A is correct event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 6, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG" Keywords: %OSPF-5-ADJCHG = 5 for Notifications from FULL to DOWN action 1.0 cli command "enable"
as mentioned its A reason : when ospf neighboring is down its "from FULL to DOWN" and shows as Notification message (%OSPF-5-ADJCHG) and yes the script has to go to enable then enters privilege's mode to execute those commands.
Guys, other then the technicalities of OSPF, I took this question with the different prospect. 6 is the informational debug msgs right ?? I went with it straight, is that wrong ?
7 is the informational debug msgs right
I have no proper output of this question, how to fix ?
A is correct https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-16/216091-best-practices-and-useful-scripts-for-ee.html