%n%

Starts a new line in the notification message

%server%

Autofills with the name of the server on which a violation was discovered

%action%

Autofills with the action description that is taken in response to a rule violation

%attachment%

Autofills with the name of the attachment in which a rule violation has been found

%datetime%

Autofills with the date and time of a violation

%details%

Autofills the details of the violation

This variable is only available for the quarantine threshold notification

%information%

Autofills with any general information available about the violation

%location%

Autofills with the name of the location at which a violation was discovered. For example, inbox, outbox, public folder

%recipient%

Autofills with the name of the intended recipient of a message in which a violation was discovered

%scan%

Autofills with the scan name that discovered a violation

%sender%

Autofills with the name of the sender of a message in which a violation was discovered

%subject%

Autofills with the contents of the subject line

%violation%

Autofills with the name of the violation detected

%ViolatingTerm%

Autofills with the list of violating terms that triggered content filtering policy

%count%

Autofills with the number of messages that violate the outbreak trigger

%threshold%

Autofills with the threshold level of an identified outbreak trigger

%trigger%

Autofills with the outbreak trigger name that detected an outbreak

%outbreak_rule%

Autofills with the outbreak rule name that triggers an outbreak

%outbreak_count%

Autofills with the number of times that an outbreak triggers