I am trying to setup a ConfigSource in LogicMonitor for Cisco ISE backups. We want the backup to only pull when a change is made in ISE. The out-of-the-box Cisco_IOS and Cisco_NXOS ConfigSources don't seem to work for ISE. So I tried to make a ConfigSource from the LM page https://www.logicmonitor.com/support/logicmodules/articles/creating-a-configsource but I haven't been able to get it to work properly. I made a copy of Cisco_IOS so I could have the Config Checks and removed the scripts. I have the following: AppliesTo: ( ( startsWith( system.sysinfo, "Cisco Identity Services Engine" ) ) ) && ( (ssh.user && ssh.pass ) || (config.user && config.pass) ) Parameters: import com.santaba.agent.groovyapi.expect.Expect host = hostProps.get("system.hostname"); user = hostProps.get("config.user"); pass = hostProps.get("config.pass"); cli=Expect.open(host, user, pass); cli.expect("#"); cli.send("terminal length 0\n"); cli.expect("#"); cli.send("show running-config all\n"); cli.expect(/Current configuration.*\n/); cli.send("exit\n"); cli.expect("#exit"); config=cli.before(); config = config.replaceAll(/ntp clock-period \d+/,"ntp clock-period "); cli.expectClose(); println config; Test comes back with the error: The script failed, elapsed time: 60 seconds - End of stream reached, no match found java.io.IOException: End of stream reached, no match found Does anyone have any ideas?

25 minutes ago, grantae said: End of stream reached, no match found This usually means that you've sent some command to the device and are waiting for a particular response that doesn't come. The lines in your code that are waiting are the cli.expect() ones. It's difficult to tell which one timed out. You can add some println statements before/after them to know which ones executed successfully. println(cli.before()) is especially handy in determining what has come back from the device.

Thank you for the suggestion. This is the first time I am trying to script with Groovy and my overall scripting experience is pretty low, so forget me if I didn't use println(cli.before()) correctly. ------------ import com.santaba.agent.groovyapi.expect.Expect host = hostProps.get("system.hostname"); user = hostProps.get("config.user"); pass = hostProps.get("config.pass"); cli=Expect.open(host, user, pass); cli.expect("#"); println(cli.before()) <------------------------- cli.send("terminal length 0\n"); cli.expect("#"); cli.send("show running-config all\n"); cli.expect(/Current configuration.*\n/); cli.send("exit\n"); cli.expect("#exit"); config=cli.before(); config = config.replaceAll(/ntp clock-period \d+/,"ntp clock-period "); cli.expectClose(); println config; ---------------------- With it added after the first section, I still got the same error. No change. I also tried the line after each section with no change. Did I just use it wrong or is the script failing immediately?

I'd suggest using before the first cli.expect statement, in case that first expect statement is the one expecting the "#" and never getting it back from the device. You might want to put a sleep statement (sleep(n) where n is the number of milliseconds the script should wait before executing the next line) between logging in and doing the println(cli.before()) so that the device has a chance to send something back to you after logging in. A lower level way to work through this is to replicate the activity of the script using your own SSH client (e.g. putty on Windows or terminal in Linux/Mac). Log in using the same credentials, make a note of what get sent to you when you log in. After providing the username and password, are you sent directly to the prompt? How do you recognize what the prompt is? Think about how you use your human brain to understand that the device is waiting for your input. Then, what command do you send and what do you expect back? When you get that back, how do you (as a human) recognize that the device has sent you everything it's going to send? Usually because it returns to the prompt. You need to teach your script not only to send the command but also to recognize the output coming back from the device and know when the device is done sending the response back and is waiting for another command. In this case, the script (trying to emulate human behavior) is looking for a #, likely because the prompt probably uses something like "my-cisco-ise# " as the prompt. Welcome to the deep end where you get to learn groovy and expect in one step. ?

Thank you for helping me learn more about groovy and expect. ---------------------------- cli=Expect.open(host, user, pass); println(cli.before()) cli.expect("#"); Results in the same error. ----------------------------- println(cli.before()) cli=Expect.open(host, user, pass); cli.expect("#"); Results: The script failed, elapsed time: 0 seconds - No such property: cli for class: Script129 Possible solutions: class groovy.lang.MissingPropertyException: No such property: cli for class: Script129 Possible solutions: class at org.codehaus.groovy.runtime.ScriptBytecodeAdapter.unwrap(ScriptBytecodeAdapter.java:66) at org.codehaus.groovy.runtime.callsite.PogoGetPropertySite.getProperty(PogoGetPropertySite.java:51) at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callGroovyObjectGetProperty(AbstractCallSite.java:310) at Script129.run(Script129.groovy:7) So I don't think it works there. -------------------------------- Noticed I didn't put a ; after the println(cli.before()) so tried cli=Expect.open(host, user, pass); cli.expect("#"); println(cli.before()); and got: The script failed, elapsed time: 60 seconds - Timeout com.santaba.agent.groovyapi.expect.expectj.TimeoutException: Timeout --------------------------------- (Surprised it ran without the semicolon) I did something similar to your PuTTY suggestion when I was checking if the password worked. I logged in with the user I made for LogicMonitor to verify the password and it goes to: "<ISE-hostname>/<username>#". So I believe cli.expect("#") would be correct. I also noted that "show logins cli" shows the LogicMonitor account logging in from the LogicMonitor IP for 00:01 a few times (Probably from running the test script).

Groovy doesn't require semicolons. Also, you can't printlin(cli.before()) before you define what cli actually is. If you do: cli=Expect.open(host, user, pass); println(cli.before()) You need to give your device some time to respond before printing out what has been received so far. I also just remembered that you can do println(cli.stdout()) as well. So, maybe something like this: cli=Expect.open(host, user, pass); sleep(10000) println(cli.stdout()) Which would login, wait for 10 seconds for the device to log you in and present the command prompt. Then println(cli.stdout()) prints out everything that has been sent back and forth to the moment.

Forum Discussion

grantae

5 years ago

Making a Backup for Cisco ISE in LogicMonitor

I am trying to setup a ConfigSource in LogicMonitor for Cisco ISE backups. We want the backup to only pull when a change is made in ISE. The out-of-the-box Cisco_IOS and Cisco_NXOS ConfigSources don't seem to work for ISE. So I tried to make a ConfigSource from the LM page https://www.logicmonitor.com/support/logicmodules/articles/creating-a-configsource but I haven't been able to get it to work properly. I made a copy of Cisco_IOS so I could have the Config Checks and removed the scripts. I have the following:

AppliesTo:

(
(
startsWith( system.sysinfo, "Cisco Identity Services Engine" )
)
) &&
(
(ssh.user && ssh.pass ) ||
(config.user && config.pass)
)

Parameters:

import com.santaba.agent.groovyapi.expect.Expect

host = hostProps.get("system.hostname");
user = hostProps.get("config.user");
pass = hostProps.get("config.pass");

cli=Expect.open(host, user, pass);
cli.expect("#");

cli.send("terminal length 0\n");
cli.expect("#");

cli.send("show running-config all\n");
cli.expect(/Current configuration.*\n/);

cli.send("exit\n");
cli.expect("#exit");

config=cli.before();
config = config.replaceAll(/ntp clock-period \d+/,"ntp clock-period ");

cli.expectClose();
println config;

Test comes back with the error:

The script failed, elapsed time: 60 seconds - End of stream reached, no match found
java.io.IOException: End of stream reached, no match found

Does anyone have any ideas?

backup

cisco

ise

Anonymous
5 years ago
Alright, check now. I've been wondering why those thumbs up weren't getting more action.
grantae
5 years ago
Still looks the same. I checked in different browsers too.
Anonymous
5 years ago
Hm, looks like i've figured out how to let you like stuff, but you can't like your own stuff and for some reason you can't like administrator stuff. Check another thread where someone other than you and I are in it.
grantae
5 years ago
Yep, I see it for other users.
Anonymous
5 years ago
Ok, i think i found it. Try now.
Anonymous
5 years ago
Btw, thanks for helping me troubleshoot this. I thought it was enabled, but the settings are pretty complex in this thing.
grantae
5 years ago
Cool, I see it now. I gave you all the thumbs.

No problem, I'm glad I could help you since you helped me so much.
Anonymous
5 years ago
grantae
5 years ago
Got to make up for lost time ?

Forum Discussion

Making a Backup for Cisco ISE in LogicMonitor

Related Content

Config Backup Reports

Azure Backup Job DS Discovery

LogicMonitor Portal Security

I want to monitor Veritas NetBackup backup jobs.

Letting non-admin users make and manage their own dynamic groups

Recent Discussions

Change roles without email notification?

ConfigSource for Linux Files.

Module Toolbox AppliesTo IDE

Non-Admin Collector install

UIv4 - Report Permission Bug