nerdexam
Cisco

350-401 · Question #855

Drag and Drop Question Drag and drop the snippets onto the blanks within the code to create an EEM script that adds an entry to a locally stored text file with a timestamp when a configuration change

The correct answer is event syslog pattern; enable; | append flash. The correct EEM script uses 'event syslog pattern' to detect configuration changes by monitoring syslog messages (such as %SYS-5-CONFIG_I), 'enable' to run the applet in privileged EXEC mode so it has the necessary permissions to write to flash, and '| append flash' to redirect a

Submitted by sofia.br· Mar 6, 2026Infrastructure Automation and Programmability – Configuring and verifying Embedded Event Manager (EEM) applets to automate network management tasks (CCNP ENCOR / CCIE Enterprise)

Question

Drag and Drop Question Drag and drop the snippets onto the blanks within the code to create an EEM script that adds an entry to a locally stored text file with a timestamp when a configuration change is made. Not all options are used. Answer:

Exhibit

350-401 question #855 exhibit

Answer Area

Drag items

event cli pattern| append flashenableconfig tevent syslog patternflash

Correct arrangement

  • event syslog pattern
  • enable
  • | append flash

Explanation

The correct EEM script uses 'event syslog pattern' to detect configuration changes by monitoring syslog messages (such as %SYS-5-CONFIG_I), 'enable' to run the applet in privileged EXEC mode so it has the necessary permissions to write to flash, and '| append flash' to redirect and append the timestamped output to a file stored on the device's flash filesystem. Together these three elements create a functional EEM applet that triggers on config changes, executes with proper privileges, and stores the log entry persistently.

Topics

#EEM#Embedded Event Manager#IOS Scripting#Network Automation

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice