Supported Alert Custom Macros
Customize the alert subject and description with the following macros so that it can generate alerts accordingly.
Supported macros keys:
| ${resource.name} | ${resource.ip} | ${resource.mac} |
| ${resource.aliasname} | ${resource.os} | ${resource.type} |
| ${resource.dnsname} | ${resource.alternateip} | ${resource.make} |
| ${resource.model} | ${resource.serialnumber} | ${resource.systemId} |
| ${parent.resource.name} | ${Custome Attributes on the resource} |
| ${parentResourceName} | ${parentResourceId} | ${parentResourceIPAddress} |
| ${parentResourceHostName} | ${Domain attributes on the resource} |
Cisco Firepower Threat Defense resources are filtered and discovered based on the following keys.
Note: You can filter the resources with the discoverable keys only.
Click here to see Cisco FMC native type.
| Native Type | Resource Attributes |
|---|
| Cisco FMC | General attributes |
| resourceName |
| hostName |
| ipAddress |
| model |
| serialNumber |
| Custom Attributes |
| Root Resource IPAddress |
| Root Resource Name |
| Root Resource HostName |
Click here to see Cisco FTD Device.
| Native Type | Resource Attributes |
|---|
| Cisco FTD Device | General attributes |
| resourceName |
| hostName |
| ipAddress |
| model |
| serialNumber |
| Custom Attributes |
| Snort Version |
| VDB Version |
| LSP Version |
| Snort Engine |
| Root Resource IPAddress |
| Root Resource Name |
| Root Resource UUID |
| Domain Attributes |
| parentResourceName |
| parentResourceId |
| parentResourceIPAddress |
| parentResourceHostName |
Click here to see Cisco FTD Interfaces.
| Native Type | Resource Attributes |
|---|
| Cisco FTD Interfaces | General attributes |
| resourceName |
| hostName |
| ipAddress |
| model |
| serialNumber |
| Custom Attributes |
| Interface Type |
| Root Resource IPAddress |
| Root Resource Name |
| Root Resource UUID |
| Domain Attributes |
| parentResourceName |
| parentResourceId |
| parentResourceIPAddress |
| parentResourceHostName |