Use a stub track object with a "delay" parameter? track 499 stub-object ! this delay will occur delay down 10 event manager applet test1 event syslog pattern ".*foo.*" action 1.0 track set 499 state down event manager applet test2 event track 499 state down action 1.0 cli command "your CLI here" This requires a suitable version of EEM (2.2 I think?)