Adding Dynamic Values to Alert Titles

Alert Rules and Substitution Parameters

When writing alert titles, you can include dynamic values from the contributing event by specifying a field in double curly braces. For example, {{user}} would be replaced by the name of the user.  

Those fields need to be aggregated for the dynamic values to work. Ensure that any dynamic specified in the alert title is also included in the aggregate values. Here is more on aggregation

Note: Depending on the type of the event, we support some fields to aggregate. For login failures, we don't support aggregations yet, so you cannot do that on the alert title.


Have more questions? Submit a request


Please sign in to leave a comment.