Token Variables

Use token variables to customize the subject line and the message body of event notifications.

To prevent email from addresses with external domains from being labeled as spam, add the external email addresses to the Approved Senders lists for Anti-Spam.

The following tokens represent threat events detected on desktops/servers and Microsoft Exchange servers.

Token

Description

Alert Type

%COUNT

Inserts the number of detections

Warning events: All

$CSM_SERVERNAME

Inserts the name of the Security Server

All

%DATE

Inserts the number of days remaining on the license

License - Expired

License - Expiring in less than 60 days

%DATE_TIME

Inserts the time and date of the event

Antivirus - Threats unresolved

Antivirus - Real-time Scan disabled on endpoints

Antivirus - Real-time Scan disabled on Exchange server(s)

Antispyware - Detections requiring device restart

Update - Outdated agents

Update - Outdated Messaging Security Agents

Update - Outdated Security Server Components

Smart Protection Services - Service unavailable

Resource shortage - Remaining disk space

%DEVICE_COUNT

Inserts the number of affected devices

Antivirus - Threats unresolved

Antivirus - Real-time Scan disabled on endpoints

Antivirus - Real-time Scan disabled on Exchange server(s)

Antispyware - Detections requiring device restart

Update - Outdated agents

Update - Outdated Messaging Security Agents

Resource shortage - Remaining disk space

All warning events except the following:

Antispam - Spam detections in total messages received exceed:

%FROM

Inserts the starting time and date of the event

All warning events except the following:

Antispam - Spam detections in total messages received exceed:

%NUMBER

Lists the number of events

Antivirus - Threats unresolved

Antivirus - Real-time Scan disabled on endpoints

Antivirus - Real-time Scan disabled on Exchange server(s)

Antispyware - Detections requiring device restart

All warning events except the following:

Antispam - Spam detections in total messages received exceed:

%SEAT_IN_USE_COUNT

Inserts the number of desktop/server seats in use

License - seat usage is more than 110%

License - seat usage is more than 100%

%SEAT_PURCHASED_COUNT

Inserts the number of desktop/server seats available in your license

License - seat usage is more than 110%

License - seat usage is more than 100%

%THRESHOLD%

Provides the threshold of an event

Update - Outdated agents

Update - Outdated Smart Scan Pattern

Update - Outdated Security Server Components

Smart Protection Services - Service unavailable

Resource shortage - Remaining disk space

License - Seat usage is more than 110%

License - Seat usage is more than 100%

Warning events: All

%TO

Inserts the ending time and date of the event

All warning events except the following:

Antispam - Spam detections in total messages received exceed:

Subject: [Security Server - <$CSM_SERVERNAME>] [Action 
Required] Antivirus - Threats unresolved: %NUMBER
Message: Trend Micro Worry-Free Business Security Notification 
* Antivirus - Threats unresolved: %NUMBER 
* Report time: %DATE_TIME
* Affected devices: %DEVICE_COUNT 
* Suggestion: 
  Run a scan using the Trend Micro HouseCall Tool.
Subject: [Security Server - Server A] [Action Required] 
Antivirus - Threats unresolved: 5
Message: Trend Micro Worry-Free Business Security Notification 
* Antivirus - Threats unresolved: 5 
* Report time: February 14, 2018
* Affected devices: 2 
* Suggestion:    
  Run a scan using the Trend Micro HouseCall Tool.