The following table explains the tokens available for alert notifications. Use the table to understand which alert rules accept the message token and the information that the token provides in an alert notification.
Not every alert notification can accept every message token. Review the alert's parameter specifications before using a message token. For details, see Alert Notification Parameters.
|
Token |
Description |
Where Allowed |
|---|---|---|
|
%ActiveApplianceIP% |
The IP address of the Deep Discovery Analyzer active primary appliance Example:
|
High Availability Restored High Availability Suspended Passive Primary Appliance Activated |
|
%ActiveApplianceName% |
The host name of the Deep Discovery Analyzer active primary appliance Examples:
|
High Availability Restored High Availability Suspended Passive Primary Appliance Activated |
|
%ApplianceError% |
The error encountered by the appliance Examples:
|
Secondary Appliance Unresponsive |
|
%ApplianceIP% |
The IP address of the Deep Discovery Analyzer appliance Example:
|
All except the following:
|
|
%ApplianceName% |
The host name of the Deep Discovery Analyzer appliance Examples:
|
All except the following:
|
|
%BackupServer% |
The host name or IP address of the backup server Examples:
|
Backup Server Inaccessible |
|
%ComponentList% |
The list of components Examples:
|
Component Update Unsuccessful |
|
%ConsoleURL% |
The Deep Discovery Analyzer management console URL Example:
|
All |
|
%CPUThreshold% |
The average CPU usage as a percentage allowed in the last 5 minutes before Deep Discovery Analyzer sends an alert notification Example:
|
High CPU Usage |
|
%CPUUsage% |
The total CPU usage as a percentage in the last 5 minutes Example:
|
High CPU Usage |
|
%DateTime% |
The date and time the alert was initiated Example:
|
All |
|
%DaysBeforeExpiration% |
The number of days before the product license expires Example:
|
License Expiration |
|
%DiagnosisTip% |
Information for the connction issue |
Connection Issue |
|
%DiskThreshold% |
The disk usage as a percentage allowed before Deep Discovery Analyzer sends an alert notification Example:
|
High Disk Usage |
|
%DiskUsage% |
The total disk usage as a percentage Example:
|
High Disk Usage |
|
%ExpirationDate% |
The date that the product license expires Example:
|
License Expiration |
|
%FreeDiskSpace% |
The amount of free disk space in GB Example:
|
High Disk Usage |
|
%HighRiskThreshold% |
The maximum number of new high-risk objects identified during the specified time period before Deep Discovery Analyzer sends an alert notification Example:
|
New High-Risk Objects Identified |
|
%LicenseStatus% |
The current status of the product license Example:
|
License Expiration |
|
%LicenseType% |
The type the product license |
License Expiration |
|
%LockedAccount% |
The account that was locked Example:
|
Account Locked |
|
%MemThreshold% |
The average memory usage as a percentage allowed in the last 5 minutes before Deep Discovery Analyzer sends an alert notification Example:
|
High Memory Usage |
|
%MemUsage% |
The total memory usage as a percentage in the last 5 minutes Example:
|
High Memory Usage |
|
%NetworkShare% |
The network share folder information Example: Share name: test | Server address:123.123.123.123 | Protocol: CIFS |
Network Share Inaccessible |
|
%PassiveApplianceIP% |
The IP address of the Deep Discovery Analyzer passive primary appliance Example:
|
High Availability Restored High Availability Suspended Passive Primary Appliance Activated |
|
%PassiveApplianceName% |
The host name of the Deep Discovery Analyzer passive primary appliance Examples:
|
High Availability Restored High Availability Suspended Passive Primary Appliance Activated |
|
%ProductName% |
The product name Example:
|
All |
|
%ProductShortName% |
The abbreviated product name Example:
|
All |
|
%SandboxQueue% |
The submission count in the sandbox queue waiting to be analyzed by Virtual Analyzer Example:
|
Long Virtual Analyzer Queue |
|
%ServiceList% |
The list of affected services |
Connection Issue |
|
%SandboxQueueThreshold% |
The maximum number of submissions in the sandbox queue before Deep Discovery Analyzer sends an alert notification Example:
|
Long Virtual Analyzer Queue |
|
%SyslogServer% |
The host name or IP address of the syslog server Examples:
|
Syslog Server Inaccessible |
|
%TimeRange% |
The time period observed for new high-risk objects before Deep Discovery Analyzer sends an alert notification Examples:
|
New High-Risk Objects Identified |
|
%UpdateError% |
The list of update errors Examples:
|
Component Update Unsuccessful |
|
%ServiceList% |
The services affected by the issue Example:
|
Connection Issue |
|
%SandboxProcessTimeThreshold% |
The maximum amount of time spent processing a sample before Deep Discovery Analyzer sends an alert notification |
Long Virtual Analyzer Processing Time alert |
|
%SampleList% |
The samples affected by the issue |
Long Virtual Analyzer Processing Time alert |
|
%TotalSampleNumber% |
The total number of samples affected by the issue |
Long Virtual Analyzer Processing Time alert |
|
%CheckingDuration% |
The amount of time it takes to perform each check |
High CPU Usage High Memory Usage |
|
%CheckingInterval% |
The amount of time between each check |
High CPU Usage High Memory Usage High Disk Usage |
|
%DiagnosisTip% |
Recommendations on how to resolve the issue |
Connection Issue |