Reference: Variables

You can use variables when you create a connection. For some connection destinations and formats, you can use variables for configured fields that can be replaced with new values when the connection run starts.

Connections

All connections support the following variables:

{connection id} or {connectionid}

Numeric ID of the connection; unique only to a specific Module Server

{connection name} or {connectionname}

User-configured name of the connection

{connection run id} or {connectionrunid}

Numeric ID of the connection run; unique only to a specific Module Server

{source}

Human-readable name of the connection source

Saved questions

Saved questions support the following variables:

{source}

Name of the saved question from the Tanium Server

{computer group} or {computergroup}

Name of the computer group from the Tanium Server

Destinations

These destinations support variable substitution for the following fields:

File

File Name

Email

Attachment File Name
Subject

Formats

These formats support variable substitution for the following fields:

CEF

Source

LEEF

Source

Syslog

MessageId

Last updated: 9/18/2018 4:07 PM | Feedback