Environment Variable
|
Description
|
%EVENT%
|
Event ID, equivalent to the Event Id field in Event Viewer.
|
%COMPUTER%
|
Name of the computer the event was generated on.
|
%DATE%
|
Date the event was created, from the TimeGenerated field.
|
%TIME%
|
Time the event was created, from the TimeGenerated field.
|
%TYPE%
|
Type of the event, I = Informational, W = Warning, E = Error, S = Audit Success, F = Audit Failure, C = Critical, and V = Verbose.
|
%LOGNAME%
|
Name of the event log the event originated from.
|
%SOURCE%
|
The source of the event, equivalent to the Source field in Event Viewer.
|
%CATEGORY%
|
The category of the event, equivalent to the Category field in Event Viewer.
|
%USER%
|
The Username of the account that generated the event.
|
%MESSAGE%
|
Message text of the event. This variable has white space, tabs, and new lines trimmed.
|
%VIEWNAME%
|
Name of the Event View the event originated from.
|
%VIEWINDEX%
|
The unique index of the Event View the event originated from.
|
%METHODNAME%
|
Name of the Notification Method the event originated from.
|
%METHODINDEX%
|
The unique index of the Notification Method the event originated from..
|
