subject:%ComputerName%: %Function% rule %RtID% %UID% has started, user: %User% Comment: %Comment% eMail: %eMail% RtID: %RtID% UID: %UID% %DOCURL% UIDname: %UIDname% LinkID: %LinkID% SourceIP: %SourceIP% GatewayIP: %GatewayIP% GatewayPort: %GatewayPort% GatewayIP2str: %GatewayIP2str% GatewayIP2: %GatewayIP2% DestinationIPName: %DestinationIPName% DestinationIP: %DestinationIP% DestinationPort: %DestinationPort% Type: %Type% RuleIDs: %RuleIDs% LogonUser: %LogonUser% LGissuer: %LGissuer% CCemail: %CCemail% CCissuer: %CCissuer% remoteInfo: %RemoteInfo% Start Time: %StartTime%