A macro is a fill element used in event notification templates. In the text of a notification generated based on the template, the macro is replaced with a certain value.
Macro syntax: %MACRO_NAME%
You can use the following macros in the body of rule triggering notifications (see the table below).
Macros for notification templates
Macro |
Description |
---|---|
%NODE_IP% |
IP address of the cluster node that processed the message. |
%NODE_PORT% |
Connection port of the cluster node that processed the message. |
%PRODUCT_NAME% |
Application name — Kaspersky Secure Mail Gateway. |
%SMTP_MESSAGE_ID% |
|
%SENDER% |
Mail sender's address. |
%SENDER_IP% |
IP address of the message sender |
%ALL_RECIPIENTS% |
Addresses of all recipients of the original message. |
%AFFECTED_RECIPIENTS% |
Addresses of the original message recipients affected by the event described in the notification. |
%AFFECTED_RULES% |
List of triggered rule IDs. |
%MESSAGE_ID% |
ID assigned to the message by Kaspersky Secure Mail Gateway. |
%SUBJECT% |
Subject of an original message. |
%DATE% |
Date when the message was received. |
%MESSAGE_ACTION% |
Action performed on the message by the application. Possible values:
If the message was placed in Backup, the action is followed by a comma and the words |
%DATA_BEGIN% |
Service macro for designating the beginning of the list of attachments. |
%DATA_END% |
Service macro for designating the end of the list of attachments. |
%OBJECT_NAME% |
Name of the detected object. The value of the macro depends on its position in the body of the notification:
In the notification subject, the |
%OBJECT_SIZE% |
Size of the whole message or individual attachments. The value of the macro depends on its position in the body of the notification:
In the notification subject, the size of the whole message is always inserted for this macro. |
%STATUS% |
Scan result for the message or attachment. The value of the macro depends on its position in the body of the notification:
If there are multiple statuses, they are inserted as a comma-separated list. |
%OBJECT_ACTION% |
Action performed on the message or attachment by the application. The value of the macro depends on its position in the body of the notification:
|