| The "Tokens" listed below can be placed between alphanumeric characters and words. When a Token is found, it is replaced with dynamic content from the relevant item, with the desired subject.
|
| Tokens | |
| %% |
a single "%" |
| %D |
date (YYYY-MM-DD) |
| %T |
time (HH:MM:SS) |
| %a |
Monitor: address field (short format) |
| %A |
Monitor: address field (long format) |
| %b |
Monitor: status (1 for UP, 0 for down) |
| %s |
Monitor: status full text |
| %u |
Monitor: up time |
| %d |
Monitor: down time |
| %t |
Monitor: type |
| %i |
Monitor: internal ID |
| %n |
Monitor: name |
| %c |
Monitor: comment |
| %f |
Monitor: frequency |
| %F |
Monitor: error frequency |
| %N |
Monitor: notify failures |
| %m |
Monitor: maximum duration |
| %M |
Monitor: maximum alerts |
| %S |
Monitor: number of alerts sent |
| %x |
Monitor: continuous failures |
| %X |
Monitor: continuous critical failures |
| %p |
Profile: name |
| %P |
Alert: name |
| %qa |
SNMP Trap: IP address from last Trap received |
| %qb |
SNMP Trap: Specific Trap identifier from the last Trap (applies to Enterprise specific Traps only) |
| %qc |
SNMP Trap: Community from the last Trap |
| %qd |
SNMP Trap: Textual description of the Trap from the last Trap: "Cold Start", "Warm Start", "Link Down", "Link Up", "Authentication Failure", "egp Neighbor Loss", "Enterprise Specific" |
| %qe |
SNMP Trap: Enterprise used for the last Trap |
example:
[%D %T] %n: "%s"
[1998-11-05 4:20:00] WWW @ MH: "Connect failed"
|