Fortinet white logo
Fortinet white logo

Incident trigger variables

Incident trigger variables

Variable

Format

Description

assigned_to

${trigger.assigned_to}

Assigned to (new/update assigned to)

attach_revision

${trigger.attach_revision}

Attach revision (new/update/delete revision)

category

${trigger.category}

Category (new/update category)

change_type

${trigger.change_type}

Change type (new/update/delete change type)

description

${trigger.description}

Description (new/update description)

endpoint

${trigger.endpoint}

Endpoint (new/update endpoint)

epid

${trigger.epid}

Endpoint ID (new/update endpoint ID)

euid

${trigger.euid}

End user ID (new/update end user ID)

incident_id

${trigger.incident_id}

Incident ID (new/update/delete incident)

mitre_info

${trigger.mitre_info}

Mitre INFO

reporter

${trigger.reporter}

Reporter (new reporter)

revision

${trigger.revision}

Revision (new/update/delete revision)

severity

${trigger.severity}

Severity (new/update severity)

status

${trigger.status}

Status (new/update status)

Incident trigger variables

Incident trigger variables

Variable

Format

Description

assigned_to

${trigger.assigned_to}

Assigned to (new/update assigned to)

attach_revision

${trigger.attach_revision}

Attach revision (new/update/delete revision)

category

${trigger.category}

Category (new/update category)

change_type

${trigger.change_type}

Change type (new/update/delete change type)

description

${trigger.description}

Description (new/update description)

endpoint

${trigger.endpoint}

Endpoint (new/update endpoint)

epid

${trigger.epid}

Endpoint ID (new/update endpoint ID)

euid

${trigger.euid}

End user ID (new/update end user ID)

incident_id

${trigger.incident_id}

Incident ID (new/update/delete incident)

mitre_info

${trigger.mitre_info}

Mitre INFO

reporter

${trigger.reporter}

Reporter (new reporter)

revision

${trigger.revision}

Revision (new/update/delete revision)

severity

${trigger.severity}

Severity (new/update severity)

status

${trigger.status}

Status (new/update status)