Table Of Contents

E Commands

ethanalyzer local interface

ethanalyzer local read

event cli

event counter

event fanabsent

event fanbad

event gold

event manager applet

event manager clear counter

event manager clear history events

event manager environment

event manager policy

event manager run

event module-failure

event oir

event policy-default

event snmp

event storm-control

event temperature

event track

E Commands

---

This chapter describes the Cisco NX-OS system management commands that begin with the letter E.

ethanalyzer local interface

To capture packets to or from the supervisor or management interface, use the ethanalyzer local interface command. To stop packet capture, use the no form of this command.

ethanalyzer local interface {inband | mgmt} [[capture-filter capt-expression] [display-filter disp-expression] [limit-captured-frames limit] [limit-frame-size bytes] [write location]] [brief]

no ethanalyzer local interface {inband | mgmt}[[display-filter disp-expression] [capture-filter capt-expression] [limit-captured-frames limit] [limit-frame-size bytes] [write location]] [brief]

Syntax Description

inband	Captures packets going between the supervisor module and the interface modules.
mgmt	Captures packets going to or from the mgmt0 port.
capture-filter capt-expression	(Optional) Filters display of output based on the expression. The expression is a quoted string.
display-filter disp-expression	(Optional) Filters display of output based on the expression. The expression is a quoted string.
limit-captured-frames limit	(Optional) Configures the maximum number of frames to capture. The range is from 0 to 2147483647. The default is 100.
limit-frame-size bytes	(Optional) Captures the configured number of bytes from a frame. The range is from 64 to 65535.
write location	(Optional) Saves the captured information to the configured location. The location can be any case-sensitive alphanumeric string up to 64 characters.
brief	(Optional) Displays the protocol summary of the captured packets.

Command Default

No packets captured.

Command Modes

Any

Supported User Roles

network-admin
vdc-admin

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

Cisco Ethanalyzer is based on the Wireshark open source code.

This command does not require a license.

Examples

This example shows how capture all packets on the mgmt 0 port:

switch# ethanalyzer local interface mgmt

#

Related Commands

Command	Description
ethanalyzer local read	Reads the captured packet data from an Ethanalyzer capture.

ethanalyzer local read

To read packets captured by Ethanalyzer, use the ethanalyzer local read command. To stop reading the packet capture, use the no form of this command.

ethanalyzer local read location

no ethanalyzer local read location

Syntax Description

location

The location to read captured packets from. The location can be any case-sensitive alphanumeric string up to 64 characters.

Command Default

None

Command Modes

Any

Supported User Roles

network-admin
vdc-admin

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

Cisco Ethanalyzer is based on the Wireshark open source code.

This command does not require a license.

Examples

This example shows how capture all packets on the mgmt 0 port:

switch# ethanalyzer local read bootflash:test-mgmt0

#

Related Commands

Command	Description
ethanalyzer local interface	Captures packets to or from the supervisor or mgmt0 port.

event cli

Use the event cli command to specify the event criteria for an Embedded Event Manager (EEM) applet that is run by matching a Cisco NX-OS command-line interface (CLI) command.

To remove the CLI command event criteria, use the no form of this command.

event cli match regex [count countnum] [time interval]

no event cli match regex [count countnum] [time interval]

Syntax Description

match regex	Specifies the regular expression (regex) used to perform the CLI command pattern match. The CLI command must have been successfully parsed before the pattern match is attempted. The pattern match is compared with the fully expanded CLI command string. If the expression contains embedded blanks, enclose it in double quotation mark.
count countnum	(Optional) Specifies the number of matching occurrences before an EEM event is triggered. When a number is not specified, an EEM event is triggered after the first match. The countnum argument must be an integer greater than 0.
time interval	(Optional) Specifies the time interval during which the one or more occurrences must take place. When the keyword is not specified, no time period check is applied. The interval argumentis an integer that represents seconds in the range from 0 to 4294967295.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify a CLI command for the EEM applet to match:

switch# configure terminal 

switch(config)# event manager applet eventcli-applet 

switch(config-applet)# event cli match "write memory.*" time 13 

switch(config-applet)#

event counter

Use the event counter command to specify the event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of a named counter crossing a threshold.

To remove the counter event criteria, use the no form of this command.

event counter name name entry-val value entry-op {gt | ge | eq | ne | lt | le} [exit-val value exit-op {gt | ge | eq | ne | lt | le}]

no event counter name name

Syntax Description

name name	Specifies the name of the counter that will be monitored. The name identifier can be any string value.
entry-val value	Specifies the value with which the contents of the current counter are compared to decide if a counter event should be raised. The value is a number in the range from -2147483648 to 2147483647, inclusive.
entry-op op	Compares the contents of the current counter value with the entry value using the specified operator: •gt—Greater than •ge—Greater than or equal to •eq—Equal to •ne—Not equal to •lt—Less than •le—Less than or equal to If there is a match, an event is triggered and event monitoring is disabled until the exit criteria are met.
exit-val value	(Optional) Specifies the value with which the contents of the current counter are compared to decide whether the exit criteria are met. The value is a number in the range from -2147483648 to 2147483647, inclusive.
exit-op op	(Optional) Compares the contents of the current counter with the exit value using a specified operator: •gt—Greater than •ge—Greater than or equal to •eq—Equal to •ne—Not equal to •lt—Less than •le—Less than or equal to If there is a match, an event is triggered and event monitoring is reenabled.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify an event criteria for an EEM applet that is run when the defined critical_errors counter exceeds the entry value:

switch# configure terminal 

switch(config)# event manager applet eventcntr-applet 

switch(config-applet)# event counter name critical_errors entry-val 3 entry-op gt 

switch(config-applet)# 

event fanabsent

Use the event fanabsent command to specify an event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of a fan absent event.

To remove the fan absent event criteria, use the no form of this command.

event fanabsent [fan number] time interval

no event fanabsent [fan number] time interval

Syntax Description

fan number	(Optional) Specify a fan number to monitor for a fan absent event. The number is in the range of 1-4
time interval	Specifies the time interval (in seconds) within which the fan can stay absent. The interval can be from 0 to 4294967295 seconds.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet runs when a fan absent event occurs:

switch# configure terminal 

switch(config)# event manager applet absent-applet 

switch(config-applet)# event fanabsent time 42 

switch(config-applet)#

event fanbad

Use the event fanbad command to specify an event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of a fan bad event.

To remove the fan bad event criteria, use the no form of this command.

event fanbad [fan number] time interval

no event fanbad [fan number] time interval

Syntax Description

fan number	(Optional) Specify a fan number to monitor for a fan bad event. The number is in the range of 1-4
time interval	Specifies the time interval (in seconds) within which the fan can stay bad. The interval can be from 0 to 4294967295 seconds.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet runs when a fan bad event occurs:

switch# configure terminal 

switch(config)# event manager applet bad-applet 

switch(config-applet)# event fanbad time 42 

switch(config-applet)#

event gold

Use the event gold command to specify an event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of a Generic Online Diagnostic (GOLD) failure event when monitoring one or more modules.

To remove the GOLD failure event criteria, use the no form of this command.

event gold module {module | all} test name [severity {minor | moderate | major}] testing-type {bootup | ondemand | scheduled | monitoring} consecutive-failure cnt

no event gold module {module | all} test name

Syntax Description

module {module | all}	Specifies that one module or all modules must be monitored: •module—Number of a specific module to be monitored. •all—Specifies that all modules are to be monitored. Note The module keyword is required to complete the event gold command.
test name	Specifies the test name of the event criteria.
severity	(Optional) Specifies the event criteria match for the diagnostic result matches with the GOLD diagnostic error: •minor—Match minor GOLD diagnostic errors. •moderate—Match moderate GOLD diagnostic errors. •major—Match major GOLD diagnostic errors.
testing-type	Specifies the event criteria based on the testing types of diagnostic from GOLD: •bootup—Specifies the diagnostic tests running on system bootup. •ondemand—Specifies the diagnostic tests running from CLI after the module is online. •schedule—Specifies the scheduled diagnostic tests. •monitoring—Specifies the diagnostic tests that are running periodically in the background to monitor the health of the system.
consecutive-failure cnt	Specifies the event criteria based on consecutive test failure information from GOLD.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet runs when a new GOLD failure event occurs for any module:

switch# configure terminal 

switch(config)# event manager applet gold-match 

switch(config-applet)# event gold module all test atBoot testing-type bootup 

switch(config-applet)#

event manager applet

Use the event manager applet command to register an applet with the Embedded Event Manager (EEM) and to enter applet configuration mode.

To remove the applet command from the configuration, use the no form of this command.

event manager applet applet-name [override name]

no event manager applet applet-name

Syntax Description

applet-name	A unique identifier for the applet. This identifier can be any string value.
override name	(Optional) Specifies this policy will override a system policy. The name is the name of the system policy to override. It should begin with double underscore.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to register an applet with EEM and to enter applet configuration mode:

switch# configure terminal 

switch(config)# event manager applet eem-applet 

switch(config-applet)# 

event manager clear counter

Use the event manager clear counter command to specify an Embedded Event Manager (EEM) counter to clear.

event manager clear counter counter-name

Syntax Description

counter-name

Specifies the name of the counter to clear.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to clear an EEM counter:

switch# configure terminal 

switch(config)# event manager clear counter eem-counter 

switch(config)# 

event manager clear history events

Use the event manager clear history events command to clear all Embedded Event Manager (EEM) event history.

event manager clear history events

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to clear all EEM event history:

switch# configure terminal 

switch(config)# event manager clear history events 

switch(config)# 

event manager environment

Use the event manager environment command to set an Embedded Event Manager (EEM) environment variable.

To disable an EEM environment variable, use the no form of this command.

event manager environment varname varvalue

no event manager environment varname

Syntax Description

varname	Specify the name of the EEM environment variable.
varvalue	String of characters, including embedded spaces, to be placed in the environment variable varname.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to set an EEM environment variable:

switch# configure terminal 

switch(config)# event manager environment _cron_entry 0-59/2 0-23/1 * * 0-7 

switch(config)# 

event manager policy

Use the event manager policy command to register an Embedded Event Manager (EEM) policy with the EEM.

To remove the event manager policy command from the configuration file, use the no form of this command.

event manager policy VSHscriptfilename

no event manager policy VSHscriptfilename

Syntax Description

VSHscriptfilename

Specifies the name of the VSH script file to register with the EEM. This name becomes the name of the EEM policy. Note System policy names begin with two underscore characters (__).

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

The EEM schedules and runs policies on the basis of an event specification that is contained within the policy itself. When the event manager policy command is invoked, the EEM examines the policy and registers it to be run when the specified event occurs.

Examples

This example shows how to register a policy:

switch# configure terminal 

switch(config)# event manager policy fanpolicy.vsh 

switch(config)# 

event manager run

Use the event manager run command to manually run a registered Embedded Event Manager (EEM) policy.

event manager run policy-name

Syntax Description

policy-name

Specifies the name of the registered EEM policy to run. Note System policy names begin with two underscore characters (__).

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to manually run a registered EEM policy:

switch# configure terminal 

switch(config)# event manager run fanpolicy.vsh 

switch(config)# 

event module-failure

Use the event module-failure command to specify an event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of a module failure event.

To remove the module failure event criteria, use the no form of this command.

event module-failure type err-name module {all | module} count count [time interval]

no event module-failure type err-name module {all | module} count count

Syntax Description

type err-name	Specify the type of failure condition. Select one of the err-name conditions: any—Any failure addon-sequence-failure—Addon sequence failure hitless-upgrade-diag-failure—Runtime diagnostic failure after hitless upgrade hitless-upgrade-failure—Hitless upgrade failure hitless-upgrade-procmgr-notif—LC software failure after hitless upgrade hitless-upgrade-reg-failure—Registration failure after hitless upgrade hitless-upgrade-seq-timeout—Hitless upgrade sequence timeout image-download-failed—Image download failure image-upgrade-failed—Image upgrade failed insertion-seq-failure—Insertion sequence failure lc-failed—LC failed lc-not-responding—LC not responding lc-ready-timeout—LC ready timeout lc-sw-failure—LC software failure registration-failure—Registration failure registration-timeout—Registration timeout runtime-diag-failure—Runtime diag failure runtime-diag-timeout—Runtime diag timeout sequence-timeout—Sequence timeout srg-info-resp-timeout—SRG info response timeout unexpected-registration—Unexpected registration received upgrade-srg-not-compatible—Upgrade SRG not compatible
module {module | all}	Specifies that one module or all modules must be monitored: •module—Number of a specific module to be monitored. •all—Specifies that all modules are to be monitored.
count count	Specifies the number of matching occurrences before amodule failure event is triggered. The count can be from 0 to 4294967295 occurrences.
time interval	(Optional) Specifies the time interval (in seconds) within which the events need to happen. The interval can be from 0 to 4294967295 seconds.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet runs when a module failure event occurs:

switch# configure terminal 

switch(config)# event manager applet modfail-applet 

switch(config-applet)# event module-failure type unexpected-registration module 6 count 2 

switch(config-applet)#

event oir

Use the event oir command to specify that an Embedded Event Manager (EEM) applet be run on the basis of an event raised when a hardware online insertion and removal (OIR) occurs. This command has three forms; fan, module, and powersupply.

To remove the OIR specification from the configuration, use the no form of this command.

event oir {fan | module | powersupply} {insert | remove | anyoir} [number]

no event oir {fan | module | powersupply} {insert | remove | anyoir} [number]

Syntax Description

fan	Specify the system fans. Optionally specify an individual fan.
module	Specify the system modules. Optionally specify an individual module.
powersupply	Specify the system power supplies. Optionally specify an individual power supply.
insert | remove | anyoir	Specify the OIR event that triggers the EEM applet. •insert—OIR insert •remove—OIR remove •anyoir—Either OIR insert or OIR remove
number	(Optional) If you selected fan, enter a fan number to monitor for an OIR event. The number is in the range of 1-4. If you selected module, enter a module number to monitor for an OIR event. The number is in the range of 1-10. If you selected pwersupply, enter a power supply number to monitor for an OIR event. The number is in the range of 1-3.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet be run on the basis of an event raised when a module OIR occurs:

switch# configure terminal 

switch(config)# event manager applet oir-applet 

switch(config-applet)# event oir module anyoir 

switch(config-applet)# 

event policy-default

Use the event policy-default command to use the event in the system policy being overridden.

To the overridden policy, use the no form of this command.

event policy-default count count [time interval]

no event policy-default count count

Syntax Description

count count	Specifies the number of matching occurrences before a default event is triggered. The count can be from 0 to 4294967295 occurrences.
time interval	(Optional) Specifies the time interval (in seconds) within which the events need to happen. The interval can be from 0 to 4294967295 seconds.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to use the event in the system policy being overridden:

switch# configure terminal 

switch(config)# event policy-default count 6 

switch(config)# 

event snmp

Use the event snmp command to specify the event criteria for an Embedded Event Manager (EEM) applet that is run by sampling Simple Network Management Protocol (SNMP) object identifier values.

To remove the SNMP event criteria, use the no form of this command.

event snmp oid value get-type {exact | next} entry-op {gt | ge | eq | ne | lt | le} entry-val value [{exit-comb {or | and} exit-op {gt | ge | eq | ne | lt | le} exit-val value exit-time time} | {exit-op {gt | ge | eq | ne | lt | le} exit-val value}] poll-interval value

no event snmp oid value get-type {exact | next} entry-op {gt | ge | eq | ne | lt | le} entry-val value [{exit-comb {or | and} exit-op {gt | ge | eq | ne | lt | le} exit-val value exit-time time} | {exit-op {gt | ge | eq | ne | lt | le} exit-val value}] poll-interval value

Syntax Description

oid value	Specifies the SNMP object identifier (object ID) values in the value argument as the event criteria. The value of the data element must be in SNMP dotted notation. An OID is defined as a type in the associated MIB and each type has an object value. Monitoring of some OID types is supported. When the oid keyword is used, an error message is returned if the OID is not one of the following: •INTEGER_TYPE •COUNTER_TYPE •GAUGE_TYPE •TIME_TICKS_TYPE •COUNTER_64_TYPE •OCTET_PRIM_TYPE •OPAQUE_PRIM_TYPE
get-type	Specifies the type of SNMP get operation to be applied to the object ID specified by the oid value argument.
exact	Retrieves the object ID specified by the oid value argument.
next	Retrieves the object ID that is the alphanumeric successor to the object ID specified by the oid value argument.
entry-op op	Compares the contents of the current object ID value with the entry value using the specified operator: •gt—Greater than •ge—Greater than or equal to •eq—Equal to •ne—Not equal to •lt—Less than •le—Less than or equal to If there is a match, an event is triggered and event monitoring is disabled until the exit criteria are met.
entry-val value	Specifies the value with which the contents of the current object ID are compared to decide if an SNMP event should be raised.
exit-comb	(Optional) Indicates the combination of exit conditions that must be met before event monitoring is reenabled.
and	(Optional) Specifies that an exit comparison operator, an exit object ID value, and an exit time value must exist.
or	(Optional) Specifies that an exit comparison operator and an exit object ID value or an exit time value must exist.
exit-op op	(Optional) Compares the contents of the current object ID with the exit value using the specified operator: •gt—Greater than •ge—Greater than or equal to •eq—Equal to •ne—Not equal to •lt—Less than •le—Less than or equal to If there is a match, an event is triggered and event monitoring is reenabled. Note This keyword and its argument are not optional if the exit-comb keyword is defined.
exit-val value	(Optional) Specifies the value with which the contents of the current object ID are compared to decide whether the exit criteria are met. Note This keyword and its argument are not optional if the exit-comb keyword is defined.
poll-interval value	Specifies the time interval between consecutive polls. The value argumentis an integer that represents seconds in the range from 1 to 4294967295. The minimum polling interval is 1 second.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify the event criteria for an EEM applet that is run by sampling SNMP object identifier values:

switch# configure terminal 

switch(config)# event manager applet snmp-applet 

switch(config-applet)# event snmp oid 4.2.1.6 get-type next entry-op eq entry-val 42 
poll-interval 2 

switch(config-applet)# 

event storm-control

Use the event storm-control command to specify an event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of a storm control event.

To remove the storm control event criteria, use the no form of this command.

event storm-control

no event storm-control

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet runs when a storm control event occurs:

switch# configure terminal 

switch(config)# event manager applet storm-applet 

switch(config-applet)# event storm control 

switch(config-applet)#

event temperature

Use the event temperature command to specify an event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of a temperature event.

To remove the temperature event criteria, use the no form of this command.

event temperature [module module] [sensor number] threshold {major | minor | any}

no event temperature threshold {major | minor | any}

Syntax Description

module module	(Optional) Specifies that a specific module must be monitored. Select from module 1 to 10.
sensor number	(Optional) Specify that a specific sensor must be monitored. Select the number from 1 to 18.
threshold {major | minor | any}	Specify the threshold even that triggers the EEM applet. Select from major, minor, or any (major or minor).

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet runs when a temperature event occurs:

switch# configure terminal 

switch(config)# event manager applet temp-applet 

switch(config-applet)# event temperature threshold major 

switch(config-applet)#

event track

Use the event track command to specify the event criteria for an Embedded Event Manager (EEM) applet that is run on the basis of an Object Tracking subsystem report for the specified object number.

To remove the report event criteria, use the no form of this command.

event track object-id state {any | up | down}

no event track object-id

Syntax Description

object-id	Specify the tracked object number in the range from 1 to 500, inclusive.
state {any | up | down}	Specifies that the tracked object transition will cause an event to be raised: •up—an event will be raised when the tracked object transitions from a down state to an up state. •down—an event will be raised when the tracked object transitions from an up state to a down state. •any—an event will be raised when the tracked object transitions to or from any state.

Defaults

None

Command Modes

Embedded Event Manager

Supported User Roles

Super user
VDC administrator
VDC user

Command History

Release	Modification
4.0(1)	This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to specify that an EEM applet runs when the state of a tracked object changes:

switch# configure terminal 

switch(config)# event manager applet tracking-applet 

switch(config-applet)# event track 42 state down 

switch(config-applet)#