183RTMRTM manages the creation, state machine, and execution of monitor policies.EAA monitor policiesA monitor policy specifies the event to monitor and actions to take when the event occurs.You can configure EAA monitor policies by using the CLI or Tcl.A monitor policy contains the following elements:• One event.• A minimum of one action.• A minimum of one user role.• One running time setting.For more information about these elements, see "Elements in a monitor policy."Elements in a monitor policyEventTable 9 shows types of events that EAA can monitor.Table 9 Monitored eventsEvent type DescriptionCLICLI event occurs in response to monitored operations performed at the CLI. For example,a command is entered, a question mark (?) is entered, or the Tab key is pressed tocomplete a command.SyslogSyslog event occurs when the information center receives the monitored log within aspecific period.NOTE:The log that is generated by the EAA RTM does not trigger the monitor policy to run.ProcessProcess event occurs in response to a state change of the monitored process (such as anexception, shutdown, start, or restart). Both manual and automatic state changes cancause the event to occur.Hotplug Hotplug event occurs when the monitored card is inserted or removed while the device isoperating.InterfaceEach interface event is associated with two user-defined thresholds: start and restart.An interface event occurs when the monitored interface traffic statistic crosses the startthreshold in the following situations:• The statistic crosses the start threshold for the first time.• The statistic crosses the start threshold each time after it crosses the restart threshold.SNMPEach SNMP event is associated with two user-defined thresholds: start and restart.SNMP event occurs when the monitored MIB variable's value crosses the start thresholdin the following situations:• The monitored variable's value crosses the start threshold for the first time.• The monitored variable's value crosses the start threshold each time after it crosses therestart threshold.