Cisco Catalyst 2960 Series, Configuration Manual

Page: 1749 / 2288

Checksum-based script integrity — Where digital signature is not supported or unavailable, users
can still enforce some basic integrity check on the TCL policy by using the Unix command
openssl
•
sha1
. The new optional
checksum
,
md5
, and
sha-1
keywords have been added to the
event
manager policy command.
•
Third-party digital signature support
—
Requires Tcl secure mode and a trustpoint to associate with
the TCL scripts in order to verify the signature.
• Script owner identification — If a policy is successfully registered with a digital signature, the owner
(or signer) of the policy can be identified by using the show event manager policy registered
command and checking the
Dsig
keyword in the show output.
•
Registration of remote Tcl policies
—
The new optional remote keyword has been added to the
event manager policy command.
• EEM Resource Management
• Resource consumption throttling — The new optional resource-limit keyword has been added to
the
event manager scheduler
command.
•
Rate limiting of triggered policies per event
—
The new optional rate-limit keyword has been added
to the event syslog command.
• EEM Usability Enhancements
• File operations in EEM applet actions — The new CLI action file has been added to allow file
selection.
• New fields are added in EEM to track statistics of queue size, dropped events, and run-time using
the
show event manager statistics EXEC command. A set of new clear commands
—
clear event
manager detector counters and clear event manager server counters — are introduced to clear
the event manager queue counters.
• EEM Event Detector Enhancements
•
CLI event detector enhancement
—
Provides the ability to detect the session where the user enters
the event cli command. Four new keywords and built-in environmental variables — username ,
host , privilege , and tty
—
are added to the event cli applet and event_reqinfo array names to the
event_register_cli event detector. The show event manager detector EXEC command has also
been modified to reflect the enhancement.
• Syslog event detector performance enhancement — Provides the option to perform string matching
on specific log message fields. The four new keywords
—
facility , mnemonic , sequence , and
timestamp
keywords — are added to the
action syslog
command,
event syslog
command, and to
the event_register_syslog event detector. The show event manager detector EXEC command
has also been modified to reflect the enhancement.
EEM Event Detectors Available by Cisco IOS Release
EEM uses software programs known as event detectors to determine when an EEM event occurs. Some event
detectors are available on every Cisco IOS release, but most event detectors have been introduced in a specific
release. Use the table below to determine which event detectors are available in your specific Cisco IOS
release. A blank entry (--) indicates that the event detector is not available: the text
“ Yes ” indicates that the
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1667
Information About Embedded Event Manager