A factory IoT network wants a Nexus switch to save the output of a transceiver command only when a specific interface-down syslog message appears. Which on-box tool matches that event and then runs the command?
Select an answer to reveal the explanation.
Short Explanation
You want a smoke alarm, not a calendar reminder. EEM watches for the syslog pattern you name and then runs the CLI action, so the transceiver output is captured at the moment the interface drops. A nightly scheduler job would run even when nothing failed.
Full Explanation
Embedded Event Manager ties an event to an action on the switch. A syslog event pattern can match the interface-down message, and a CLI action can run the transceiver command and store the output. That is the tool that fires only when the factory's specific message appears. The scheduler runs a job on a clock or a calendar. It has no syslog pattern, so it cannot wait for the interface to fail. POAP is a day-0 bootstrap that looks for a DHCP offer and a script when the switch has no startup configuration. It does not sit in production waiting for an interface syslog. SPAN copies frames from a source interface to a destination. It does not match syslog text and it does not run a show command when a link drops. Caveat: the applet must be registered, and the syslog pattern has to match the real message text, including the interface name if you filter that tightly. Operational check: shut the test interface, confirm the applet triggers once, and confirm the saved command output is from that event rather than from a timed job.