Additional Variables for Alerting

Version 8

    Verified Product Versions

    Endpoint Manager 9.5Endpoint Manager 9.6Endpoint Manager 2016.x

    NOTICE:  This information is provided as is, and is not currently supported by LANDesk Technical Support.


    When using alerting it would sometimes be useful to have more detail in the e-mail that can be automatically sent.  There are 4 standard variables that can be included.  These are:


    %D - Alert description

    %T - Time alert was generated

    %N - Name of computer that generated alert

    %S - Severity of alert


    While these 4 general pieces of information are often helpful, there can be times that more detail would be helpful.  For example, anything in the core alert ruleset (including inventory history or device monitoring alerts) will always return the core server for the name of the computer that generated the alert, even though it is not the device that needs to have action taken on it.  To find the alert that the action really refers to you need to look in the alert logs.


    Notice: A simple tool has been created for easy access to these variables and is available for download at


    How to include alert specific variables in alert e-mails:


    1 - Find the name of the alert

         a - Go to Alerting and look it up

    Example: Inventory Server - Attribute Modified



    2 - Search for the alert name in the files located in \\<coreserver>\ldmain\alertstrings that have the name xxx-internal.yyyy.strings.xml where xxx is a three character language code (enu for English, esp for Spanish, etc.) and yyyy can be anything.  In one of the files it should show up.

    Example: enu-internal.ldms.InvSrv.strings.xml contains the Inventory Server - Attribute Modified alert.



    3 - Look at the variables that are in the detail tag for that alert.  Variable are in the format %variable name%

    Example: Inventory Server - Attribute Modified alert contains %attribute%, %node%, %id%, %prevval%, %newval%



    4 - Use those variable for that specific alert in your e-mail.




    Any variable that starts with the same letter as the four standard e-mail variables (D, T, N, S) needs to have an extra % placed at the beginning.

    Example: %id% will work fine, but %node% needs to be %%node% or else it will come out as <Name of computer that generated the alert)ode% (Treating it as %N default alert followed by 'ode%' rather than treating it as %node%)  The double % at the beginning resolves this issue and makes those variable work correctly.