|
|
|
|
|
 |
NoteNot every alert notification can accept every message token. Review the alert's parameter
specifications before using a message token. For details, see Alert Notification Parameters.
|
|
Token
|
Description
|
Notes
|
|---|---|---|
|
%AveSandboxProc%
|
The average time in minutes it takes to queue and
analyze messages in the past hour
|
Where allowed:
Examples:
|
|
%ComponentList%
|
The list of components.
|
Where allowed:
Examples:
|
|
%CPUThreshold%
|
The maximum CPU usage as a percentage allowed before
TippingPoint Advanced Threat Protection for Email sends an alert notification
|
Where allowed:
Examples:
|
|
%CPUUsage%
|
The total CPU utilization as a percentage
|
Where allowed:
Examples:
|
|
%DateTime%
|
The date and time that the TippingPoint Advanced Threat Protection for Email
received the email message
|
Where allowed:
Examples:
|
|
%DaysBeforeExpiration%
|
The number of days before the product
license expires
|
Where allowed:
Examples:
|
|
%DeliveryQueue%
|
The number of email messages in the delivery queue
waiting for TippingPoint Advanced Threat Protection for Email to process.
|
Where allowed:
Examples:
|
|
%DetectionCount%
|
The number of messages detected with suspicious
characteristics during the specified period of time
|
Where allowed:
Examples:
|
|
%DetectionThreshold%
|
The maximum number of messages detected to
have suspicious characteristics before TippingPoint Advanced Threat Protection for Email sends an alert notification
|
Where allowed:
Examples:
|
|
%DeviceIP%
|
The IP address of the TippingPoint Advanced Threat Protection for Email appliance
|
Where allowed:
Example:
|
|
%DeviceName%
|
The host name of the TippingPoint Advanced Threat Protection for Email appliance
|
Where allowed:
Example:
|
|
%DiskSpace%
|
The lowest amount of disk space in GB before TippingPoint Advanced Threat Protection for Email send an alert notification
|
Where allowed:
Examples:
|
|
%DomainList%
|
The list of unreachable domains
|
Where allowed:
Examples:
|
|
%ExpirationDate%
|
The date that the product license expires
|
Where allowed:
Examples:
|
|
%Interval%
|
The frequency that TippingPoint Advanced Threat Protection for Email checks the message processing
volume in minutes
|
Where allowed:
Examples:
|
|
%LicenseStatus%
|
The current status of the product license
|
Where allowed:
Examples:
For details, see Product License Status.
|
|
%LicenseType%
|
The product license type
|
Where allowed:
Examples:
|
|
%MessageList%
|
The list of detected messages, which includes the
risk level, threat type, action taken, message ID, recipients, sender, recipient,
subject, top three most risky attachment details, and when the message was
received.
|
Where allowed:
Examples:
|
|
%MTAList%
|
The list of unreachable MTAs. Each MTA appears as an IP
address and the port number.
|
Where allowed:
Examples:
|
|
%ProcessingCount%
|
The total number of processed messages over the
specified period of time
|
Where allowed:
Examples:
|
|
%ProcessingThreshold%
|
The maximum number of processed messages
during the specified time frame before TippingPoint Advanced Threat Protection for Email sends an alert notification
|
Where allowed:
Examples:
|
|
%QueueThreshold%
|
The maximum number of messages in the delivery
queue before TippingPoint Advanced Threat Protection for Email sends an alert
notification
|
Where allowed:
Examples:
|
|
%SandboxProcThreshold%
|
The maximum amount of time allocated for
average sandbox processing before TippingPoint Advanced Threat Protection for Email
sends an alert notification
|
Where allowed:
Examples:
|
|
%SandboxQueue%
|
The email message count in the sandbox queue waiting
to be analyzed by Virtual Analyzer
|
Where allowed:
Examples:
|
|
%SandboxQueueThreshold%
|
The maximum number of messages in the
sandbox queue before TippingPoint Advanced Threat Protection for Email sends an
alert notification
|
Where allowed:
Examples:
|
|
%ServiceName%
|
The stopped TippingPoint Advanced Threat Protection for Email service
Where allowed:
|
Where allowed:
Example:
|