Variables in User Notifications for File Events

Policy Guide › User Notifications › Variables in User Notifications for File Events

Variables in User Notifications for File Events

You can use variables when specifying user notification messages or smart tags.

Notification messages

When defining the text in a notification dialog for a file event you can use variables to customize the text content based on the circumstances of the control event. For example, if a control trigger displays a warning when users attempt to copy a particular Microsoft Office document to a removable drive, you can use the %author% variable to include the name of the file author in your notification message.

File variables used in this context only apply to files detected by Data In Motion triggers where the control action is set to Block, Warn or Inform.

Smart tags

You can also use these variables to specify smart tags. In many cases, they are better suited for use as smart tags than in notification messages. Smart tags allow you to categorize scanned or captured file events and are stored with the events on the CMS.

Some variables can only be used when specifying smart tags.

File variables used in this context apply to files detected by any Data In Motion or Data At Rest trigger.

Note: Variables are not case-sensitive. So, for example, you can type %URL% or %url% when defining a notification message.

The supported variables follow:

%accessed%

Displays the date and time when the file was last accessed. For NBA-captured files, it displays the date and time when the NBA reassembled the file.

For example, this smart tag value:

Last accessed:%accessed%

Generates this smart tag:

Last accessed:2009-06-22T13:34:44.460

%author%

(For Microsoft Office files only) Displays the file's Author property.

For example, this message in the policy:

You are not permitted to print documents written by %author%.

Displays like this in a notification message:

You are not permitted to print documents written by Spencer Rimmel.

%channel%

(For CA DataMinder Network-captured files only) Displays the type of activity, for example: WEB, WEBMAIL, EMAIL, FTP, IM or NEWS. This variable is typically used in smart tags to categorize captured events.

Only WEB, WEBMAIL, and EMAIL can appear in blocking notifications; captured events on other channels (such as FTP file transfers) cannot generate user notifications.

For example, this smart tag value:

Activity: %channel%

Generates this smart tag:

Activity: FTP

%created%

Displays the date and time when the file was created. For CA DataMinder Network-captured files, it displays the date and time when the CA DataMinder Network reassembled the file.

For example, this smart tag value:

File created: %created%

Generates this smart tag:

File created:2009-06-21T10:35:51.342

%dest%

Displays the machine name (if available) or IP address of the destination machine. For file uploads or files sent via IM conversations, the destination machine is a Web server.

For example, this smart tag value:

Destination: %dest%

Generates this smart tag:

Destination: 212.58.226.79

%device%

For files captured by the CFSA, this displays the name of the USB device. For files captured by the CPSA, this displays the printer name.

For example, this message in the policy:

You are not authorized to copy files to this device: %device%.

Displays like this in a notification message:

You are not authorized to copy files to this device: Unipraxis,DataPen 3.0,PMAP,,

%filename%

Displays the name of the file captured, scanned or imported by CA DataMinder. For example, this message in the policy:

You are not permitted to copy %filename%.

Displays like this in a notification message:

You are not permitted to copy Contact_Details.docx.

%host%

For files captured by CA DataMinder Network or imported files, this displays the machine that the file was ingested from (that is, the machine hosting the file).

For files captured by the CFSA or CPSA, this displays the machine hosting the CFSA or CPSA.

For example, this smart tag value:

Host computer: %host%

Generates this smart tag:

Host computer: ux-milano-xp

%MessageToUsers%

Displays the value of the Message To Users setting.

For example, you can forward blocked emails to a manager. You can also specify separate notification messages for the original sender and the manager. If the user policy specifies:

This message for the 'Trigger/Message to Users' setting in the trigger:

References to %Keystring% are prohibited in corporate correspondence.

This message for the 'System Settings/User Notifications/Forwarded E-mail Settings/Outgoing Body' setting:
```
The attached mail was blocked. The message displayed to the sender was "%MessageToUsers%".
```

Then, the forwarded email contains this message:

The attached mail was blocked. The message displayed to the sender was "References to Project Alpha are prohibited in corporate correspondence."

%modified%

Displays the date and time when the file was last modified.

For CA DataMinder Network-captured files, it displays the date and time when CA DataMinder Network reassembled the file.

For example, this smart tag value:

File modified: %modified%

Generates this smart tag:

File modified:2009-06-27T18:41:58.312

%path%

Displays the path to the file, excluding the server and the file name itself. For example, this smart tag value:

Found in: %path%

Generates this smart tag:

Found in: C:\Users\SRimmel\Documents

%protocol%

Available only for CA DataMinder Network-captured files. Displays the data transport protocol, such as HTTP-POST, HTTP-GET or HOTMAIL-ATTACH.

For example, this smart tag value:

Protocol: %protocol%

Generates this smart tag:

Protocol: HTTP_POST

Alternatively, this example message in the policy:

The following %protocol% file has been blocked.

Displays like this in a notification message:

The following HOTMAIL-ATTACH file has been blocked.

%size%

Displays the file size in bytes. For example, this smart tag value:

Bytes: %size%

Generates this smart tag:

Bytes: 11023

%source%

(Available for CA DataMinder Network-captured files only) Displays the machine name (if available) or the IP address of the source machine. For file downloads, the source machine is a Web server. For example, this smart tag value:

Source: %source%

Generates this smart tag:

Source: cn=unipraxis.com(231.38.126.79),cn=computers

%subject%

(Available for Microsoft Office files only) Displays the file's Subject property. For example, this smart tag value:

Subject: %subject%

Generates this smart tag:

Subject: Contact Details

%TriggerName%

Displays the value of the Trigger Name setting.

For example, if the user policy specifies this message for the 'Trigger/Message to Users' setting in the trigger:

This message or the associated attachment(s) you are attempting to send is in possible violation of a corporate intellectual property rights policy called "%triggername%".

Then it displays like this in a notification email:

This message or the associated attachment(s) you are attempting to send is in possible violation of a corporate intellectual property rights policy called "Patent Applications".

%URL%

Available only for certain CA DataMinder Network-captured files. Displays the destination URL for file transfers. Note that this information is not always available.

For example, this message in the policy:

Your file transfer to %url% has been blocked.

Displays like this in a notification message:

Your file transfer to http://ux-milano-xp/data/form_handler.asp has been blocked.

More information:

Smart Tags and File Events