subject:%ComputerName%:  %Function% rule %RtID% %UID%  has terminated, user: %LogonUser%

Comment: %Comment%
eMail: %eMail%
RtID: %RtID%
UID: %UID%   %DOCURL%
UIDname: %UIDname%
LinkID: %LinkID%
SourceIP: %SourceIP%
GatewayIP: %GatewayIP%
GatewayPort: %GatewayPort%
GatewayIP2str: %GatewayIP2str%
GatewayIP2: %GatewayIP2%
DestinationIPName: %DestinationIPName%
DestinationIP: %DestinationIP%
DestinationPort: %DestinationPort%
Type: %Type%
RuleIDs: %RuleIDs%
LogonUser: %LogonUser%
LGissuer: %LGissuer%
CCemail: %CCemail%
CCissuer: %CCissuer%
RemoteInfo: %RemoteInfo%
Start Time: %StartTime%
Termination Time: %TerminationTime%
Bytes from SourceIP: %BytesFromSourceIP%
Bytes to SourceIP: %BytesToSourceIP%
Termination Info: %TerminationInfo%