Supported Variables and Fields

Top  Previous  Next

Runtime variables

Runtime variables are variables that may change during runtime or that depend on the event record being processed. These variables are supported in the following fields:

 

Target / Feature

Variable Name

Expands to

Supported Fields

Example

SMTP Target

$HOSTNAME

local computername

Sendername

Sender Email

Subject

Header & Footer

FILESERVER1

 

$COUNT

the number of event log records in the email

Subject

3

 

$LOG

the event log that was scanned

Subject

Directory Service

 

 

The following variables always reflect the value of the first event contained in the email (since emails may contain multiple records).

 

$FILTER

the name of the filter which captured the event

Subject

Default Filter

 

$FILTERGROUP

the name of the filtergroup (of the above filter)

Subject

File Servers

 

$EVENTID

the event ID of the first event

Subject

14

 

$EVENTSOURCE

the event source of the first event

Subject

Security

 

$EVENTCATEGORY

the event category of the first event

Subject

Account Logon

 

$EVENTTYPE

the event type of the first event

Subject

Warning

 

$EVENTMESSAGE

the event message (max. 100 characters) of the first event. Messages longer than 100 characters will have " ..." appened.

Subject

The EventSentry service is ready.

 

 

 

 

 

 

The $LOG variable is expanded to Various if the SMTP message is a summary notification or backup message. In this case an email can contain messages from different event logs and not just from a single one.

 

 

 

 

 

File Target

$HOSTNAME

local computer name

File Name

FILESERVER1

 

$DAY, $MONTH,

$YEAR, $HOUR,

$MINUTE

current date and/or time

File Name

n/a

 

 

 

 

 

ODBC Target

$HOSTNAME

local computer name

Table Name

FILESERVER1

 

 

 

 

 

 

Please note that certain characters might not be allowed in the table name even though they are valid in the local computername, depending on the database software that you are using.

 

One such example is the hyphen character " - " which is not allowed by default in a table name when using MS SQL Server. To avoid problems enclose the table name in brackets such as [My-Table] or [$HOSTNAME] when using MS SQL Server. Please check with your database vendors documentation for details.

 

 

 

 

 

Event Log Backup

$HOSTNAME

local computer name

File Name

FILESERVER1

 

$LOG

event log being processed

File Name

Application

 

$DAY, $MONTH,

$YEAR, $HOUR,

$MINUTE

current date and/or time

File Name

n/a

Custom Variables

Custom variables are supported in the following fields:

 

Backup Event Logs

       Backup File ("File")

Filters

       Event Source

       Category

       Username

SMTP Notification

       Sender Name

       Sender Email

       Recipients

       Subject

       Primary (incl. User & Pass)

       Secondary (incl. User & Pass)

       Dial

       Header and Footer

ODBC Notification

       DSN Name

       Table Name

       Username

       Password

Syslog

       Hostname

File

       File Name

Network Message

       NetBIOS Name

Process

       Arguments

 

 

Variables are always saved with filters. To send updated variables to remote hosts make sure you update Filters with Remote Update.