Introduction
The Utility Tokens are used in the Alert escalation policy configuration for alert details and resource in the notifications template or incident creation.
Alert Notification Tokens
| Display Name | Token | Display Type | Description |
|---|---|---|---|
| Alert acknowledged | $alert.acknowledged | ALERT | Click the provided URL to redirect to alert acknowledgment page |
| Alert client id | $alert.clientUniqueId | ALERT | Client unique id associated with the alert |
| Alert client name | $alert.resource.clientName | ALERT | Client organization name associated with the alert |
| Alert Component | $alert.component | ALERT | Resource component associated with the alert |
| Alert Created Date in Client's Time Zone | $function.convertDate($alert.clientUniqueId,$alert.createdDate,"yyyy-MM-dd HH:mm:ssZ") | ALERT | Customized date format of the alert created date in client timezone Ex: function.convertDate($alert.clientUniqueId,$alert.createdDate,"yyyy-MM-dd HH:mm:ssZ") Date Format: yyyy-MM-dd'T'HH:mm:ssZ (We can modify this format to required valid date format) |
| Alert Created Date in Format | $function.convertDate($alert.createdDate,"yyyy-MM-dd HH:mm:ssZ","GMT") | ALERT | Customize the Date format and timezone of alert created date Ex: $function.convertDate($alert.updatedTime,"yyyy-MM-dd HH:mm:ssZ","GMT") Date Format: yyyy-MM-dd'T'HH:mm:ssZ (We can modify this format to required valid date format) Time Zone: GMT (we can modify GMT to required valid timezone) |
| Alert created time | $alert.createdDate | ALERT | Alert Created Time in GMT format |
| Alert description | $alert.description | ALERT | Description of the alert |
| Alert Description in plain format | $alert.plainDescription | ALERT | Description of the alert in plain format |
| Alert elapsed time | $alert.elapsedTimeString | ALERT | Time elapsed from alert creation until now |
| Alert external id | $alert.extAlertId | ALERT | Alert Id captured from third party source |
| Alert healed time | $alert.healedTimeString | ALERT | Time duration between alert created and alert healed |
| Alert id | $alert.uniqueId | ALERT | ID of the alert |
| Alert last repeated time | $alert.updatedTime | ALERT | Alert last repeated time in GMT format |
| Alert last updated time | $alert.alertTime | ALERT | Alert updated time in GMT format |
| Alert metric | $alert.serviceName | ALERT | Metric name associated with the alert |
| Alert partner name | $alert.mspName | ALERT | Partner organization name associated with the alert |
| Alert priority | $alert.priority | ALERT | Alert priority (deprecated) |
| Alert Problem Area | $alert.problemArea | ALERT | Problem area associated with the alert |
| Alert repeat count | $alert.repeatCount | ALERT | Number of times the alert repeated for the same resource, metric, component |
| Alert state | $alert.currentState | ALERT | Current state of the alert |
| Alert subject | $alert.subject | ALERT | Subject of the alert |
| Alert suppressed | $alert.suppressed | ALERT | Click the provided URL to redirect to alert suppression page |
| Alert technology | $alert.app | ALERT | Source application of the alert |
| Alert type | $alert.alertType | ALERT | Type of the alert |
| Alert Updated Date in Format | $function.convertDate($alert.updatedTime,"yyyy-MM-dd HH:mm:ssZ","GMT") | ALERT | Customize the Date format and timezone of alert updated date Ex: $function.convertDate($alert.updatedTime,"yyyy-MM-dd HH:mm:ssZ","GMT") Date Format: yyyy-MM-dd'T'HH:mm:ssZ (We can modify this format to required valid date format) Time Zone: GMT (we can modify GMT to required valid timezone) |
| Alert Updated in Client's Time Zone | $function.convertDate($alert.clientUniqueId,$alert.updatedTime,"yyyy-MM-dd HH:mm:ssZ") | ALERT | Customized date format of the alert updated date in client timezone Ex: function.convertDate($alert.clientUniqueId,$alert.createdDate,"yyyy-MM-dd HH:mm:ssZ") Date Format: yyyy-MM-dd'T'HH:mm:ssZ (We can modify this format to required valid date format) |
| Availability Alert | $alert.availability | ALERT | Is the alert for availability or not |
| Correlated Alerts | $alert.correlatedAlerts | ALERT | Correlated alert details for inference alert |
| Ignore recovery noise | $alert.ignoreRecoveryNoise | ALERT | Ignores repeat heal alerts |
| Recovery alert | $alert.isRecoveryAlert | ALERT | Is the alert for recovery or not |
| Client Service Name | $alert.clientServiceName | CLIENT | Purchased Service Of Client |
| Acknowledge Alert | $acknowledge | EMAIL_CONTENT | Click the provided URL to redirect to alert acknowledgment page |
| Alert client name | $alert.clientName | EMAIL_CONTENT | Client organization name associated with the alert |
| Alert description | $alert.description | EMAIL_CONTENT | Description of the alert |
| Alert elapsed time | $duration | EMAIL_CONTENT | Time elapsed from alert creation until now |
| Alert external ID | $alert.extAlertId | EMAIL_CONTENT | Alert Id captured from third party source |
| Alert Healed Time | $alertHealedIn | EMAIL_CONTENT | Time duration between alert created and alert healed |
| Alert ID | $alert.id | EMAIL_CONTENT | ID of the alert |
| Alert last update time | $alert.alertTime | EMAIL_CONTENT | Alert updated time in GMT format |
| Alert partner name | $alert.mspName | EMAIL_CONTENT | Partner organization name associated with the alert |
| Alert priority name | $alert.priorityName | EMAIL_CONTENT | Alert priority (deprecated) |
| Alert repeat count | $alert.count | EMAIL_CONTENT | Number of times the alert repeated for the same resource, metric, component |
| Alert resource IP | $alert.deviceIp | EMAIL_CONTENT | IP address of resource associated with the alert |
| Alert resource name | $alert.deviceName | EMAIL_CONTENT | Name of resource associated with the alert |
| Alert state | $alert.state | EMAIL_CONTENT | Current state of the alert |
| Alert subject | $alert.subject | EMAIL_CONTENT | Subject of the alert |
| Customer | $customerNames | EMAIL_CONTENT | List of customers applicable for escalate alert policy |
| Device Group | $deviceGroups | EMAIL_CONTENT | Device group of the resource associated with alert |
| Escalate alert policy | $policyName | EMAIL_CONTENT | Name of the alert escalation policy |
| Escalate alert priority | $priority | EMAIL_CONTENT | Priority of the alert escalation policy |
| Escalated alert count | $alertsCount | EMAIL_CONTENT | Total number of alerts which are currently escalated by a policy |
| Escalated resource alias name | $resourceAliasName | EMAIL_CONTENT | Alias name of resources whose alerts are currently escalated by a policy |
| Escalated resource count | $resourcesCount | EMAIL_CONTENT | Total number of resources whose alerts are currently escalated by a policy |
| Escalated resource name | $resourceNames | EMAIL_CONTENT | Name of resources whose alerts are currently escalated by a policy |
| First alert time | $alert.createdDateString | EMAIL_CONTENT | Alert created time in yyyy-MM-dd HH:mm:ss z format |
| Last alert time | $alert.updatedDateString | EMAIL_CONTENT | Alert last repeated time in yyyy-MM-dd HH:mm:ss z format |
| Metric | $alert.serviceName | EMAIL_CONTENT | Metric name associated with the alert |
| Other users notified | $notifiedUsers | EMAIL_CONTENT | Users in current and previous levels who received notification |
| Recovery Alert | $isRecoveryAlert | EMAIL_CONTENT | Is the alert for recovery or not |
| Service Group | $services | EMAIL_CONTENT | Service group of the resource associated with the alert |
| Site | $sites | EMAIL_CONTENT | Site of the resource associated with the alert |
| Suppress Alert | $suppress | EMAIL_CONTENT | Click the provided URL to redirect to alert suppression page |
| Alert client name | $alert.clientName | EMAIL_SUBJECT | Client organization name associated with the alert |
| Alert Healed Time | $alertHealedIn | EMAIL_SUBJECT | Time duration between alert created and alert healed |
| Alert ID | $alert.id | EMAIL_SUBJECT | ID of the alert |
| Alert partner name | $alert.mspName | EMAIL_SUBJECT | Partner organization name associated with the alert |
| Alert resource IP | $alert.deviceIp | EMAIL_SUBJECT | IP address of resource associated with the alert |
| Alert resource name | $alert.deviceName | EMAIL_SUBJECT | Name of the resource associated with the alert |
| Alert state | $alert.state | EMAIL_SUBJECT | Current state of the alert |
| Alert subject | $alert.subject | EMAIL_SUBJECT | Subject of the alert |
| Escalate alert policy | $policyName | EMAIL_SUBJECT | Name of the alert escalation policy |
| Escalate alert priority | $priority | EMAIL_SUBJECT | Alert priority (deprecated) |
| Escalated alert count | $alertsCount | EMAIL_SUBJECT | Total number of alerts which are currently escalated by a policy |
| Escalated resource count | $resourcesCount | EMAIL_SUBJECT | Total number of resources whose alerts are currently escalated by a policy |
| Metric | $alert.serviceName | EMAIL_SUBJECT | Metric name associated with the alert |
| Recovery Alert | $isRecoveryAlert | EMAIL_SUBJECT | Is the alert for recovery or not |
| Resource Alias Name | $resourceAliasName | EMAIL_SUBJECT | Alias name of resource associated with the alert |
| Notification priority | $notification.priority | NOTIFICATION | Notification priority of the escalation policy |
| Users notified | $notification.recipients.user.name | NOTIFICATION | Users notified |
| Policy name | $policy.name | POLICY | Name of the escalation policy |
| Resource alias name | $alert.resource.aliasName | RESOURCE | Alias name of resource associated with the alert |
| Resource Alternate IP | $alert.resource.alternateIP | RESOURCE | Alternate IP address of resource associated with the alert |
| Resource AWS account id | $alert.resource.awsAccountId | RESOURCE | Resource AWS account id associated with the alert |
| Resource AWS instance name | $alert.resource.awsCustomAttrName | RESOURCE | Resource AWS instance name associated with the alert |
| Resource description | $alert.resource.description | RESOURCE | Description of the resource associated with the alert |
| Resource device group | $alert.resource.deviceGroups | RESOURCE | Device groups of the resource associated with the alert |
| Resource DNS Name | $alert.resource.dnsName | RESOURCE | DNS Name of the resource associated with the alert |
| Resource instance id | $alert.resource.instanceId | RESOURCE | Resource instance id associated with the alert |
| Resource IP | $alert.resource.ipAddress | RESOURCE | IP address of resource associated with the alert |
| Resource Make | $alert.resource.make | RESOURCE | Make of the resource associated with the alert |
| Resource Model | $alert.resource.model | RESOURCE | Model of the resource associated with the alert |
| Resource name | $alert.resource.name | RESOURCE | Name of the resource associated with the alert |
| Resource OS Name | $alert.resource.osName | RESOURCE | OS Name of the resource associated with the alert |
| Resource RDS DB name | $alert.resource.rdsDbName | RESOURCE | Resource RDS DB name associated with the alert |
| Resource Serial Number | $alert.resource.serialNumber | RESOURCE | Serial number of the resource associated with the alert |
| Resource service group | $alert.resource.serviceGroups | RESOURCE | Service groups of the resource associated with the alert |
| Resource site name | $alert.resource.siteName | RESOURCE | Site of the resource associated with the alert |
| Resource Type | $alert.resource.resourceType | RESOURCE | Resource Type associated with the alert |
| Resource UUID | $alert.resource.uniqueId | RESOURCE | Resource UUID associated with the alert |
| Alert ID | $alert.id | SMS_CONTENT | ID of the alert |
| Alert repeat count | $alert.count | SMS_CONTENT | Number of times the alert repeated for the same resource, metric, component |
| Alert resource IP | $alert.deviceIp | SMS_CONTENT | IP address of resource associated with the alert |
| Alert resource name | $alert.deviceName | SMS_CONTENT | Name of the resource associated with the alert |
| Alert state | $alert.state | SMS_CONTENT | Current state of the alert |
| Alert subject | $alert.subject | SMS_CONTENT | Subject of the alert |
| Customer | $customerNames | SMS_CONTENT | List of customers applicable for escalate alert policy |
| Escalate alert policy | $policyName | SMS_CONTENT | Name of the alert escalation policy |
| Escalate alert priority | $priority | SMS_CONTENT | Priority of the alert escalation policy |
| Escalated alert count | $alertsCount | SMS_CONTENT | Total number of alerts which are currently escalated by a policy |
| Escalated resource count | $resourcesCount | SMS_CONTENT | Total number of resources whose alerts are currently escalated by a policy |
| Escalated resource name | $resourceNames | SMS_CONTENT | Name of resources whose alerts are currently escalated by a policy |
| First alert time | $alert.createdDateString | SMS_CONTENT | Alert created time in yyyy-MM-dd HH:mm:ss z format |
| Metric | $alert.serviceName | SMS_CONTENT | Metric name associated with the alert |
Service Desk Notification Tokens
| Token | Token Type | Entity Type | Display Name | Display Type | Description |
|---|---|---|---|---|---|
| $UniqueId | STRING | TICKET | Ticket Unique ID | SDESK_EVENT_NOTIFICATION | Unique ID of the ticket |
| Request ID | $RequestId | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket numeric ID |
| Subject | $Subject | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Subject of the ticket |
| Description | $Description | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Description of the ticket |
| Partner | $Partner | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Partner name of the ticket |
| Client | $Client | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Client name of the ticket |
| Priority | $Priority | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Priority of the ticket |
| Status | $Status | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Status of the ticket |
| Assignee | $Assignee | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Assignee of the ticket |
| Assignee Group | $AssigneeGroup | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Assignee Group of the ticket |
| Source | $Source | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Source for which ticket is created |
| Source Policy Type | $SourcePolicyType | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Source policy type for the ticket |
| Reason | $Reason | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Status Change reason of the ticket |
| Created Date | $CreatedDate | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket created date in GMT format |
| Created Date (Customized Timezone) | $utils.convertDate($entity.createdDate,"yyyy-MM-dd'T'HH:mm:ssZ","GMT") | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Customized Date ticket was created. Customize the Date format and timezone of ticket created date Ex: $utils.convertDate($entity.createdDate,"yyyy-MM-dd'T'HH:mm:ssZ","GMT") Date Format: yyyy-MM-dd'T'HH:mm:ssZ (We can modify this format to required valid date format) Time Zone: GMT (we can modify GMT to required valid timezone) |
| Created Date (Client's Timezone) | $utils.convertDate($entity.client.uniqueId,$entity.createdDate,"yyyy-MM-dd'T'HH:mm:ssZ") | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Customized date format of the ticket created date in client timezone Ex: $utils.convertDate($entity.client.uniqueId,$entity.createdDate,"yyyy-MM-dd'T'HH:mm:ssZ") Date Format: yyyy-MM-dd'T'HH:mm:ssZ (We can modify this format to required valid date format) |
| Created Date (Partner's Timezone) | $utils.convertDate($entity.msp.uniqueId,$entity.createdDate,"yyyy-MM-dd'T'HH:mm:ssZ") | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Customized date format of the ticket created date in partner timezone Ex: $utils.convertDate($entity.msp.uniqueId,$entity.createdDate,"yyyy-MM-dd'T'HH:mm:ssZ") Date Format: yyyy-MM-dd'T'HH:mm:ssZ (We can modify this format to required valid date format) |
| Resources | $Resources | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Resources mapped to the ticket |
| Requestor Full Name | $Requestor | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket Requestor's full name |
| Requestor First Name | $RequestorFirstName | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket Requestor's first name |
| Requestor Last Name | $RequestorLastName | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket Requestor's last name |
| Creator Full Name | $Creator | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket Creator's full name |
| Partner Access URL | $pRequestAccessURL | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket custom brand access url of the partner |
| Client Access URL | $RequestAccessURL | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Ticket custom brand access url of the client |
| fieldNames Updated (Default) | $fieldNamesUpdated | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Verifying any native field of the ticket is updated or not |
| fieldNames Updated (Custom) | $CustomfieldNamesUpdated | STRING | TICKET | SDESK_EVENT_NOTIFICATION | Verifying any custom field of the ticket is updated or not |
| Category | $Category | STRING | INCIDENT | SDESK_EVENT_NOTIFICATION | Category captured in the ticket |
| Sub Category | $SubCategory | STRING | INCIDENT | SDESK_EVENT_NOTIFICATION | Sub Category captured in the ticket |
| Problem Reference | $ProblemReference | STRING | INCIDENT | SDESK_EVENT_NOTIFICATION | Linked problem id of the incident ticket |
| Change Reference | $ChangeReference | STRING | INCIDENT | SDESK_EVENT_NOTIFICATION | Linked change request id of the incident ticket |
| Due Date | $DueDate | STRING | INCIDENT | SDESK_EVENT_NOTIFICATION | Due date captured in the ticket |
| Parent Ticket | $ParentTicket | STRING | INCIDENT | SDESK_EVENT_NOTIFICATION | Parent incident ticket for existing incident ticket |
| Estimated Time | $EstimatedTime | STRING | TASK | SDESK_EVENT_NOTIFICATION | Time estimated captured in the task |
| Time Spent | $TimeSpent | STRING | TASK | SDESK_EVENT_NOTIFICATION | Time spent captured in the ticket |
| Start Date | $StartDate | STRING | TASK | SDESK_EVENT_NOTIFICATION | Start date captured in the ticket |
| Due Date | $DueDate | STRING | TASK | SDESK_EVENT_NOTIFICATION | Due date captured in the ticket |
| Project | $Project | STRING | TASK | SDESK_EVENT_NOTIFICATION | Deprecated |
| Remaining Time on the Request | $RemainingTime | STRING | ACSTICKET | SDESK_EVENT_NOTIFICATION | Duration between permission schedule end time and ticket approved time |
| Access time left on the Request | $AccessTime | STRING | ACSTICKET | SDESK_EVENT_NOTIFICATION | Duration between ticket created time and until ticket is approved |
| Time duration available to access the Request | $TimeWindow | STRING | ACSTICKET | SDESK_EVENT_NOTIFICATION | Start time and End time of the permission schedule |
| Permissions given on the Request | $Permissions | STRING | ACSTICKET | SDESK_EVENT_NOTIFICATION | Deprecated |
| Category | $Category | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Category captured in the ticket |
| Sub Category | $SubCategory | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Sub Category captured in the ticket |
| Root Cause | $RootCause | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Root cause captured in the problem ticket |
| Work Around | $WorkAround | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Work around captured in the problem ticket |
| Application | $Application | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Application for which the problem is detected |
| Change Reference | $ChangeReference | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Change reference for the problem |
| Estimated Time | $EstimatedTime | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Estimated time captured in the problem ticket |
| Time Spent | $TimeSpent | STRING | PROBLEM | SDESK_EVENT_NOTIFICATION | Time spent captured in the problem ticket |
| Category | $Category | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Category captured in the ticket |
| Sub Category | $SubCategory | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Sub Category captured in the ticket |
| Change Type | $ChangeType | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Type captured in the change ticket |
| Change Plan | $ChangePlan | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Change plan captured in the change ticket |
| Rollback Plan | $RollbackPlan | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Rollback plan captured in the change ticket |
| Test Plan | $TestPlan | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Test plan captured in the change ticket |
| Planned Start Date | $PlanStartDate | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Planned scheduled start date of the change request |
| Planned End Date | $PlanEndDate | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Planned scheduled end date of the change request |
| Work Start Date | $WorkStart | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Actual work scheduled start date of the change request |
| Work End Date | $WorkEnd | STRING | CHANGE | SDESK_EVENT_NOTIFICATION | Actual work scheduled end date of the change request |
| SLA Time | $TimeWarning | STRING | SLA | SDESK_EVENT_NOTIFICATION | Remaining SLA time for Incident or Service Request |
| Description (As HTML text) | $htmlDescription | STRING | CONTENT | SDESK_EVENT_NOTIFICATION | Description of the ticket in HTML format |
| Response (As HTML text) | $htmlResponse | STRING | CONTENT | SDESK_EVENT_NOTIFICATION | Latest conversation of the ticket in HTML format |
| Latest 10 responses | $Responses | STRING | CONTENT | SDESK_EVENT_NOTIFICATION | Latest 10 conversations in the ticket |
Canned Response Tokens
| Entity Type | Token | Token Type | Display Name | Display Type | Description |
|---|---|---|---|---|---|
| Ticket | $ticket.uniqueId | String | Request Id | CANNED_RESPONSE | ID of the ticket |
| Ticket | $ticket.subject | String | Subject | CANNED_RESPONSE | Subject of the ticket |
| Ticket | $ticket.priority.name | String | Priority | CANNED_RESPONSE | Priority of the ticket |
| Ticket | $ticket.status.name | String | Status | CANNED_RESPONSE | Status of the ticket |
| Ticket | $Resources | String | Resources | CANNED_RESPONSE | Resources associated with the ticket |
| Ticket | $ticket.alertList | String | Attached Alerts | CANNED_RESPONSE | List of alerts attached to the ticket |
| Ticket | $ticket.requester.fullName | String | Requestor Full Name | CANNED_RESPONSE | Requestor of the ticket |
| Ticket | $ticket.createdBy.fullName | String | Creator Full Name | CANNED_RESPONSE | Full Name of the ticket creator |
| Ticket | $ticket.lastUpdatedBy.fullName | String | Responder (login user) Full name | CANNED_RESPONSE | Full Name of person who last updated the ticket |
| Ticket | $ticket.msp.name | String | Partner Name | CANNED_RESPONSE | Partner Name associated with the ticket |
| Ticket | $pRequestAccessURL | String | Partner Access URL | CANNED_RESPONSE | Partner Access URL associated with the ticket |
| Ticket | $ticket.client.name | String | Client Name | CANNED_RESPONSE | Client Name associated with the ticket |
| Ticket | $RequestAccessURL | String | Client Access URL | CANNED_RESPONSE | Client Access URL associated with the ticket |
| Alert | $alert.uniqueId | String | Alert Id | CANNED_RESPONSE | ID of the alert |
| Alert | $alert.subject | String | Alert Subject | CANNED_RESPONSE | Subject of the alert |
| Alert | $alert.description | String | Alert Description | CANNED_RESPONSE | Description of the alert |
| Alert | $alert.app | String | Alert Technology | CANNED_RESPONSE | Source from which the alert was generated |
| Alert | $alert.alertType | String | Alert Type | CANNED_RESPONSE | Type of the alert |
| Alert | $alert.component | String | Alert Component | CANNED_RESPONSE | Component of the alert |
| Alert | $alert.serviceName | String | Alert Metric | CANNED_RESPONSE | Metric or Service Name associated with the alert |
| Alert | $alert.currentState | String | Alert State | CANNED_RESPONSE | Current State of the alert |
| Alert | $alert.repeatCount | String | Alert Repeat Count | CANNED_RESPONSE | Number of times the alert repeated |
| Alert | $alert.createdDate | String | Alert Created Time | CANNED_RESPONSE | Time alert was created |
| Alert | $alert.alertTime | String | Alert Last Updated Time | CANNED_RESPONSE | Time alert was last updated |
| Alert | $alert.updatedTime | String | Alert Last Repeated Time | CANNED_RESPONSE | Time alert was last repeated |
| Alert | $alert.availability | String | Availability Alert | CANNED_RESPONSE | Alert is an availability alert |
| Alert | $alert.ignoreRecoveryNoise | String | Ignore Recovery Noise | CANNED_RESPONSE | Ignore individual recovery or healed alerts |
| Alert | $alert.isRecoveryAlert | String | Recovery Alert | CANNED_RESPONSE | Alert is a recovery alert |
| Alert | $alertCorrelatedAlerts | String | Correlated Alerts Details | CANNED_RESPONSE | Existing correlated alert details of an inference alert |
| Alert | $alertResourceDetails | String | Alert Resource Details | CANNED_RESPONSE | Resource details associated with the alert |
| Alert | $alert.device.ipAddress | String | IP Address | CANNED_RESPONSE | IP Address of device associated with the alert |
| Alert | $alert.device.siteName | String | Location | CANNED_RESPONSE | Site Name of device associated with the alert |