An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process…

The correct syntax for an Embedded Event Manager (EEM) applet to generate and send a custom syslog message is action syslog msg "". The msg keyword is used to specify the string of text that will be logged. The applet is triggered by a routing table change, and the action's purpose is to create a new log entry, for which msg is the required parameter to define the log's content.

A. action 1 syslog send "OSPF ROUTING ERROR"

The keyword send is not a valid parameter for the action syslog command in Cisco IOS EEM. The correct keyword to specify the message content is msg.

B. action 1 syslog pattern "OSPF ROUTING ERROR"

The pattern keyword is used within an event detector (e.g., event syslog pattern "...") to trigger an applet based on matching an existing syslog message, not to generate a new one as an action.

C. action 1 syslog write "OSPF ROUTING ERROR"

The keyword write is not a valid parameter for the action syslog command. It is not used for generating syslog messages within EEM.

1. Cisco IOS XE Embedded Event Manager Command Reference:

Document: Embedded Event Manager Command Reference

Cisco IOS XE Gibraltar 16.12.x

Section: action syslog

Content: The official command syntax is documented as action label syslog [priority level] [facility string] msg string. This explicitly shows that the msg keyword is required to define the message string. An example provided is action 1.0 syslog msg "Interface $eventpubinterface went down".

2. Cisco IOS Embedded Event Manager Configuration Guide:

Document: Embedded Event Manager Configuration Guide

Cisco IOS XE Cupertino 17.9.x

Section: Writing Embedded Event Manager Policies Using the Cisco IOS CLI > EEM Action CLI Commands

Content: This guide details the various action commands. For action syslog

it confirms the syntax requires the msg argument to specify the message to be logged

reinforcing that other keywords like send

pattern

or write are incorrect for this purpose.